john-users - Re: MSSQL Hash Format in JTR

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sun, 14 Aug 2011 22:45:04 -0400
From: Erik Winkler <ewinkler@...ls.com>
To: john-users@...ts.openwall.com
Subject: Re: MSSQL Hash Format in JTR

I refer you to the following URL for a good description of SQL 2005 and 2000 hashes.

http://hkashfi.blogspot.com/2007/08/breaking-sql-server-2005-hashes.html


> Now the question is, when I check the candidate passwords that are being tried by JTR against these hashes, they are all in Uppercase. Why is that so?
> 
> Are the MSSQL 2000 hashes supposed to be case insensitive?
> 
> Another question, which relates to the same topic is.
> 
> When I try to crack multiple MSSQL hashes with JTR version 1.7.7 jumbo 1,
> 
> I notice that, it tries some weird combination of characters and not the actual wordlist passwords.
> 
> Also, it tries to bruteforce only the first hash in the hash list. Remaining hashes are ignored.
> 
> Is this is a known bug since I couldn't find it listed anywhere in the mailing list, so I have opened this new topic.
> 
> Regards,
> NeonFlash
> 
>