john-users - Re: LM an NTLM combination

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 7 Mar 2007 12:38:11 -0800
From: "Alain Espinosa" <alainesp@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: LM an NTLM combination

On 3/7/07, antares <antares@....ch> wrote:
> The problem is well reproducible here. I think this is due to the
> different word list we use, especially due to the fact that my word list
> originates from an unfinished pot file, leading maybe to some kind of
> string which are of more offense to the ntlm patch than to the jumbo
> patch. However I can only speculate since I am a poor programmer...

>There may be really a bug... interesting is also, that the jumbo patch
>lead to 22 guesses in addition to the sum of the first and second run
>with the ntlm patch.

The "john-1.7.2-ntlm-alainesp-4.diff" patch only works with passwords
of lenght <= 27. This could explain the difference of 22 guesses but
dont explain the second run with guesses.
If you can, please send me the hashes and wordlist for reproduce the
problem and correct it.

alain

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.