Date: Wed, 2 Sep 2009 18:01:01 -0400 From: Kaleb Hosie <kalebh@...essdeniedinc.com> To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com> Subject: RE: Using Cain and Abel Hashes Alright. For those that are not familiar with Cain and Abel, what it does is you can capture information traveling across the network. When a user logs on to Active Directory, it records the hash. The problem is that it isn't very efficient at cracking hashes (not to mention only for Windows). I've attached a hash as per Alexander's request. The password for this hash is: 2002 The confidential statement is set on the Exchange server and I don't have access. PS: This email is not confidential (unless you want it to be) :P ________________________________________ From: Solar Designer [solar@...nwall.com] Sent: Wednesday, September 02, 2009 5:11 PM To: john-users@...ts.openwall.com Subject: Re: [john-users] Using Cain and Abel Hashes On Tue, Sep 01, 2009 at 05:34:25PM -0400, Kaleb Hosie wrote: > Is there a way to test the security of someone's Active Directory password using the hash gathered from Cain and Abel? I am not familiar with Cain and Abel; I suspect that only a small fraction of subscribers to this list are. You might enable more of us to potentially answer your question by posting a sample of that "hash gathered from Cain and Abel". If you post the corresponding plaintext password (a test one indeed), that would work even better. Please consider doing it. Even if no one ends up answering your question, the information you'd post (a hash + password combo) could be of some use to some of those searching the list archives months or years later. ;-) > This e-mail is confidential. [...] Then why did you sent it to a public mailing list? ;-) Seriously, those confidentiality notices are rather annoying, especially on mailing list postings. You may want to remove yours if you have any control over it (I understand that you might not). Alexander This e-mail is confidential. If you are not the intended recipient, please notify the sender and delete this e-mail and any attachments without copying, disclosing or retaining it in any form. Ce courriel est confidentiel. Si vous n'etes pas le destinataire designe, veuillez en informer l'expediteur et supprimer ce courriel ainsi que tous fichiers joints sans les copier, divulguer ou conserver d'aucune facon. View attachment "KRB5.TXT" of type "text/plain" (131 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.