If you have physical access - Try BartPE
On Saturday, July 30, 2005, at 06:37AM, Paul Farrow [EMAIL PROTECTED] wrote:
Yup after I posted that I read your post, have to admit, searching a
table full of hashes would be a hell of alot quicker than cracking it
manually :]
But then again, I rarely crack any hashes (good memory for my own
passwords) but anything for md5 i use passcracking.net/com.
But i suppose it wouldnt be difficult to code up a quick php page to
fill a mysql dbase with incremental hashes generated on the fly... might
look into it
(even though its no doubt been done) fun project for a rainy day i suppose.
[EMAIL PROTECTED] wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
rainbow crack finds this pass Test0r in 5-10sec and you doesn't need
an huge machine to get it, if you like johnthe ripper, I heavly
suggest you to generate your tables and start using rbcrack, because
you are loosing your time on john, believe me :)
At 12:25 30/07/05, Paul Farrow wrote:
Chances are the system used by the website was a multi-processor
beast of machine, able to maximise cpu time to cracking the passwords.
If you can get the password hash, then your best bet is to run it
through jtr(john the ripper).
C:\toolkit\passwords\pwdump pwdump2
Administrator:500:62b239ea3de3b4142e04d2d295f821b0:a929535485de3b50889
23fd58d02cca2:::
ASPNET:1000:f5052a93de1b6a7848d83fff52bb5c55:264d62a5f32f74bb6df2642a5
14fd17f:::
Guest:501:d9dce10ca0c8ba7baad3b435b51404ee:672e556cf53bf2a83c36bead638
3212b:::
__vmware_user__:1002:aad3b435b51404eeaad3b435b51404ee:69deddc712c272b3
3e31fae0f4b82a73:::
C:\toolkit\passwords\pwdump pwdump2 passwords.dump
C:\toolkit\passwords\johnjohn -incremental passwords.dump
Loaded 4 passwords with no different salts (NT LM DES [24/32 4K])
TEST0R (Administrator:2)
guesses: 1 time: 0:00:00:20 c/s: 9045001 trying: PMSBRK - HLEYKL
Thats on a 1.987mhz AMD processor in windows 2000, running about 30
other things at once.
Hope this helps.
X u r r o n wrote:
hiya!
I have tried many softwares for cracking NTLM hashes, like NC4, Cain
and have't tried Rainbow Crack yet.
Once i had to recover my XPs lost admin password and i spend around
1 day but Cain/NC4 were not able to guess that. Then i posted that
hashes on some site and it did recover my passwd in around 5min. I
want to know which technique they used to crack so fast ?
Xurron
--
--
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2rc2 (MingW32)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=+sl3
-END PGP SIGNATURE-
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
