[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <E193699D-04CE-4322-9AF2-D4B9D2E17CEF@gmail.com>
Date: Mon, 13 Jan 2014 16:14:49 -0800
From: NRO <nro117gm@...il.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: Re: Cracking MSChap v2
I hope I'm not dumbing down the thread too much but: I got JTR Bleeding Jumbo installed and running and was able to enter the hash noted earlier in this thread. So far it's been running for 19 hours. So far no results and I'm not sure how to verify whether or not there is progress.
Have hit enter to get status but it just shoes 0 guesses.
> On Jan 13, 2014, at 3:48 PM, Pedro Worcel <pedro@...cel.com> wrote:
>
> Thanks for this, I enjoyed the read.
>
>
> 2014/1/14 Rich Rumble <richrumble@...il.com>
>
>>> On Mon, Jan 13, 2014 at 5:54 PM, Rob Fuller <jd.mubix@...il.com> wrote:
>>> Looked through the source and mailing list, but couldn't find it, has
>> there
>>> been any work on cracking NetNTLMv1 down to NTLM hashes?
>> http://markgamache.blogspot.com/2013/01/ntlm-challenge-response-is-100-broken.html
>>> https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/
>> That blog post was grandstanding pure an simple, ntlmv1 has been
>> broken well before that blog post, by plenty of others.Every cracker
>> I've ever used broke the challange and the password, l0pht was first,
>> cain is still good. I just re-read the post (I even have an old
>> comment on it when it came out), I don't see what the fuss was about
>> with that blog post, other than it got some attention, when reading it
>> all I can think about is:
>> http://www.quickmeme.com/it-is-known
>> I believe there are patches for NetNTLMv1 in the Jumbo versions of JtR
>> http://www.openwall.com/lists/john-users/2010/07/09/1
>> https://www.google.com/search?q=site%3Aopenwall.com+netntlm
>> -rich
>
>
>
> --
> GPG: http://is.gd/droope <http://is.gd/signature_>
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
