john-users - Re: Hash from a Windows 7

Openwall wordlists collection for password cracking (20+ languages)

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 26 Jan 2013 22:00:38 +0100
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: Hash from a Windows 7

On 26 Jan, 2013, at 20:23 , madfran@...-ezine.org wrote:
> Hash fron a workstation Windows 7 Professional 64 bit
> The hash has been downloaded with pwdump7
> Information downloaded,
> sys_build_local:1000:8175E8A5154A540C5DF3EF8A549185D3:6750FFA0E043035F3CF37B976CF1624B:::
> I know the password.
> It follow the rules gave by the administrator, but I choose one not complicate.
> the pass is: Victor-0000
>  
> (...)
>  
> It is possible that john-jumbo has a bug, and is not able to crack the hash from Windows 7?

I believe you did something wrong, or your pwdump program did. The hashes for Victor-0000 are definitely these:

sys_build_local:1000:120ef7d1e2fd748241163b31ff9b73bb:b35a45f1c9df2ef3a1b3012b93ce759b:::

Try re-setting the password again, and make a new pwdump file. Maybe try some other pwdump tool. Please report back if/when you find out what is wrong.

magnum