john-users - LM with empty strings = password longer than 15 chars?

Openwall wordlists collection for password cracking (20+ languages)

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 15 Nov 2012 08:14:19 +0100
From: "john wittgeinstein" <pandemonium@....us>
To: john-users@...ts.openwall.com
Subject: LM with empty strings = password longer than 15 chars?

Ive got this pwdump output:

 Administrator:500:aad3b435b51404eeaad3b435b51404ee:4dc0249ad90ab626362050195893c788:::
 Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
 user:1000:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::

 We can clearly see "aad3b435b51404ee" string which invokes empty key. But again all the LM hashes are the same for each user. The LM are the same for admin, Guest, user, but the NT are different. Is this common to happen if Admin is more than 15 characters long?

 Tnx in advance!