john-users - RE: duplicate guesses with 1.7.3.1-all-2 jumbo patch

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Sat, 30 Aug 2008 17:38:49 -0400
From: Adam Turk <bofh1234@...mail.com>
To: <john-users@...ts.openwall.com>
Subject: RE: duplicate guesses with 1.7.3.1-all-2 jumbo patch


> Date: Sat, 30 Aug 2008 07:19:04 +0400
> From: solar@...nwall.com
> To: john-users@...ts.openwall.com
> Subject: Re: [john-users] duplicate guesses with 1.7.3.1-all-2 jumbo patch
>
> On Fri, Aug 29, 2008 at 04:37:09PM -0400, Adam Turk wrote:
>> #./john hashes.txt
>
> I sure hope you're not running JtR as root. It does not require root
> privileges (after you have possibly obtained the shadow file as root).

I was already logged in as root doing some system maintenance and didn't want to su to my user account.  Just being lazy.  I usually login as a user.

>> Loaded 6 password hashes with no different salts (LM DES [64/64 BS MMX])
>> BB (b)
>> A (a)
>> TESTTES (Administrator:1)
>> CDC (c)
>> DEDE (d)
> ...
>
>> The NT hash works fine now, but the NTLM hash still reports 6 hashes loaded
>
> Everything is correct here. (Well, except that it's "LM hash", not
> "NTLM hash" as you said, that "still reports 6 hashes loaded" for you.)
>
> One of your passwords is longer than 7 characters, so it corresponds to
> two LM hash halves, which are being loaded and cracked independently.
> This is addressed in the FAQ as follows:

You are of course correct I meant LM and not NTLM.  How could I have forgotten that the LM hash is split?  That of course answers the number of hashes issue.  I swear I don't usually make these kinds of errors.  Maybe it is time for a vacation.  A real one where I am not near a PC, laptop, the internet.  I might go into tech withdrawal, but it might be worth it :)

Thanks for helping the forgetful person.  Please keep up the good work.



_________________________________________________________________
Get ideas on sharing photos from people like you.  Find new ways to share.
http://www.windowslive.com/explore/photogallery/posts?ocid=TXT_TAGLM_WL_Photo_Gallery_082008
-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.