Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 15 Nov 2012 08:14:19 +0100
From: "john wittgeinstein" <pandemonium@....us>
To: john-users@...ts.openwall.com
Subject: LM with empty strings = password longer than 15 chars?

Ive got this pwdump output:

 Administrator:500:aad3b435b51404eeaad3b435b51404ee:4dc0249ad90ab626362050195893c788:::
 Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
 user:1000:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::

 We can clearly see "aad3b435b51404ee" string which invokes empty key. But again all the LM hashes are the same for each user. The LM are the same for admin, Guest, user, but the NT are different. Is this common to happen if Admin is more than 15 characters long?

 Tnx in advance!

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.