john-users - Re: JtR & NTLMv2 passwords

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Tue, 02 May 2006 17:06:07 +0200
From: Guillaume Arcas <guillaume.arcas@...e.fr>
To: john-users@...ts.openwall.com
Subject: Re: JtR & NTLMv2 passwords

Selon Solar Designer <solar@...nwall.com>:

> This question itself is confusing.
>
> My (limited) understanding is that NTLMv2 is a revision of the NTLM
> authentication protocol as described, for example, here:
>
> 	http://davenport.sourceforge.net/ntlm.html
>
> However, even when NTLMv2 is in use, the underlying password hashes
> that are stored on Windows systems are plain NTLM, not NTLMv2 (there's
> no such thing as an NTLMv2 password hash; instead, there are NTLMv2
> challenge responses).
>
> JtR supports LM and NTLM hashes (the latter with the contributed patch)
> that are stored on Windows systems.

Thanks, that exactly what I wanted to know/understand more clearly.

Regards,

Guillaume Arcas - [http://yom.retiaire.org]
-----------------------------------------------------------
"Je cherche un ailleurs, mais pas trop loin d'ici." (Sempé)