Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 5 Nov 2008 14:36:41 -0500
From: Adam Turk <bofh1234@...mail.com>
To: <john-users@...ts.openwall.com>
Subject: RE: ntlm and lm hashes questions


> I have a Windows hash output file that contains some lm hashes and
> some ntlm hashes.  Not every user has an lm hash so I would like to
> crack ntlm hashes when lm hashes are not present.  I applied the
> ntlm-alainesp patch to John so I can crack ntlm hashes when need be.
> From what I can tell, if I don't specify the format John only attempts
> the lm hashes.  Is this correct?  
Correct

> Is there a way to have it crack the
> ntlm if no lm is present or will I need to run the processes
> separately, once with the format=LM and then once with format=NT using
> the cut field delimited method listed on the "uppercase only thread" -
> http://www.openwall.com/lists/john-users/2006/07/08/2
Having john trying to crack NTLM and LM hashes is good in theory but
will have a negative impact on performance.

For best results you will have to run a john process on two separate 
PCs (one for LM hashes and one for NTLM) or use a PC with a duo or 
quad core processor.


_________________________________________________________________
Stay up to date on your PC, the Web, and your mobile phone with Windows Live
http://clk.atdmt.com/MRT/go/119462413/direct/01/
-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.