Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 4 May 2006 01:51:31 +0400
From: Solar Designer <>
Subject: Re: Password Hashes loaded vs. ./john --show

On Wed, May 03, 2006 at 05:08:43PM -0400, Arvind Sood wrote:
> The only reason I loaded it with the NT parameter was based on the
> case-sensitive stuff I read about on the forum. Since I was not sure if I
> could live with the passwords being displayed in the wrong case, I went in
> with the safer option.
> Having seen how much quicker it cracked the LM hashes (there are some
> accounts for which the --format=LM already shows a password while the
> --format=NT is still working)..... I see your point about trying with the LM
> format first.

When you have both hash types, you do not need to be actually cracking
your NTLM hashes.  Instead, you may use them to infer the right case of
characters in your LM-hash-cracked passwords - which is done quickly:

Alexander Peslyak <solar at>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598 - bringing security into open computing environments

Was I helpful?  Please give your feedback here:

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ