Date: Wed, 5 Nov 2008 14:36:41 -0500 From: Adam Turk <bofh1234@...mail.com> To: <john-users@...ts.openwall.com> Subject: RE: ntlm and lm hashes questions > I have a Windows hash output file that contains some lm hashes and > some ntlm hashes. Not every user has an lm hash so I would like to > crack ntlm hashes when lm hashes are not present. I applied the > ntlm-alainesp patch to John so I can crack ntlm hashes when need be. > From what I can tell, if I don't specify the format John only attempts > the lm hashes. Is this correct? Correct > Is there a way to have it crack the > ntlm if no lm is present or will I need to run the processes > separately, once with the format=LM and then once with format=NT using > the cut field delimited method listed on the "uppercase only thread" - > http://www.openwall.com/lists/john-users/2006/07/08/2 Having john trying to crack NTLM and LM hashes is good in theory but will have a negative impact on performance. For best results you will have to run a john process on two separate PCs (one for LM hashes and one for NTLM) or use a PC with a duo or quad core processor. _________________________________________________________________ Stay up to date on your PC, the Web, and your mobile phone with Windows Live http://clk.atdmt.com/MRT/go/119462413/direct/01/ -- To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply to the automated confirmation request that will be sent to you.
Powered by blists - more mailing lists
Powered by Openwall GNU/*/Linux - Powered by OpenVZ