Date: Mon, 13 Jan 2014 18:44:10 -0500 From: Rich Rumble <richrumble@...il.com> To: john-users@...ts.openwall.com Subject: Re: Cracking MSChap v2 On Mon, Jan 13, 2014 at 5:54 PM, Rob Fuller <jd.mubix@...il.com> wrote: > Looked through the source and mailing list, but couldn't find it, has there > been any work on cracking NetNTLMv1 down to NTLM hashes? > > http://markgamache.blogspot.com/2013/01/ntlm-challenge-response-is-100-broken.html > https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/ That blog post was grandstanding pure an simple, ntlmv1 has been broken well before that blog post, by plenty of others.Every cracker I've ever used broke the challange and the password, l0pht was first, cain is still good. I just re-read the post (I even have an old comment on it when it came out), I don't see what the fuss was about with that blog post, other than it got some attention, when reading it all I can think about is: http://www.quickmeme.com/it-is-known I believe there are patches for NetNTLMv1 in the Jumbo versions of JtR http://www.openwall.com/lists/john-users/2010/07/09/1 https://www.google.com/search?q=site%3Aopenwall.com+netntlm -rich
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.