Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 17 Feb 2006 14:44:54 +0100
From: thomas springer <>
Subject: Re: JtR 1.7 f. Win with NTLM-Hashes

The errors not libdes-related (i have it installed, for i compiled
1.6.37 with the ntlm-patch before).

I needed the thing for a presentation yesterday - so i did a quick and
dirty-version and threw away the stripped-down patch. Give me until
Monday - I promise to report the errors and put together a complete
binary version with sourcecode, modified patch and a bit of

If someone wants to fiddle with the plain binary, get it on

And Hey, Alex: JtR 1.7 is running fine and fast! Thank you!

from the readme.txt
>This is a patched Version of John the Ripper 1.7 compiled against
cygwin that supports >NTLM- and LM-Hashes.
>It is patched using a stripped down Jumbo-Patch
>( and
SHOULD add support for
>NT and LM!
>* Eggdrop (-format=bfegg)
>* Dominosec (-format=dominosec)
>* Lotus v5 Proprietary (-format=lotus5)
>* Invision Power Board 2.x salted MD5 (-format=ipb2)
>* Apache MD5 (-format=md5a)
>* Post.Office MD5 (-format=po)
>* MySQL (-format=mysql)
>* MS-Cache-Hash (-format=mscash)
>* NTLM (-format=NT)
>* LanManager (-format=LM)
>* Raw MD5 (-format=raw-md5)
>* Raw SHA1 (-format=raw-sha1)
>It does NOT support Kerberos and NSLDAP!
>You'll need the usual JtR-Stuff AND the cygwin-dll's (get em at >installed.
>john <pwfile> -format=NT
>john <pwfile> -format=LM

On 2/17/06, Solar Designer <> wrote:
> On Fri, Feb 17, 2006 at 01:01:09PM +0100, thomas springer wrote:
> > I don't know if all of you are aware of this, but there is an NTLM
> > (MD4)-Patch for John 1.7 embedded in the "Jumbo Patch" at
> >
> >
> > So far so good.
> >
> > After applying the Jumbo-Patch on Cygwin, compilation failed on some
> > parts (kerberos and other).
> Most likely, you did not have libdes installed.  Some of the patches
> included in the jumbo patch require libdes.
> FWIW, I think someone (Erik?) should update the patch to compile with
> OpenSSL instead of with the standalone libdes.  This should be trivial
> to do.  It is far more common to readily have OpenSSL installed.
> > Compiling worked after ripping out a few
> > parts - the patched version is undocumented (have to look at the
> > patchcode to get the correct format-options), but works fine and fast
> > on LM and NTLM-Hashes.
> >
> > Did anybody got to compile the complete Jumbo-Patch with JtR 1.7 under Windows?
> >
> > I'll be happy to release a binary and at least rudimentary documented
> > patched windows-binary, but maybe somebody else got the "whole thing"
> > to work?
> If you submit it (or if someone else does), I'd be happy to include such
> a Windows binary in contrib.
> Thanks,
> --
> Alexander Peslyak <solar at>
> GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
> - bringing security into open computing environments
> Was I helpful?  Please give your feedback here:
> --
> To unsubscribe, e-mail and reply
> to the automated confirmation request that will be sent to you.

[nach mir der synflood.]

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.