Efficient Password Cracking Where LM Hashes Exist for Some Users

Sometimes you end up with a great many Windows domain passwords that need cracking – either because you have compromised the domain controller and exported them yourself, or because the client has asked you to perform a password audit and has supplied the database to you themselves.

As you know, LM hashes are insecure, and there is a very good way of cracking these (Ophcrack). However, there will also be passwords that cannot be cracked using the standard tables, or maybe the LM hash is not present in the dump at all. In this case, we’ll need to attack the NTLM hash with another tool – in this case a GPU cracker known as Oclhashcat.

In this case we have a large (something like 6,000 entry) pwdump format file, with LM and NTLM hashes. Because the LM hashes have various weaknesses in the cryptography, we can crack a lot of passwords using Ophcrack – but in some cases only NTLM hashes are present. In this case we can use a hybrid approach.

find more : lm hash cracker

Comments

  1. Do this hack to drop 2lb of fat in 8 hours

    At least 160,000 men and women are utilizing a simple and SECRET "liquids hack" to lose 2lbs each night as they sleep.

    It is easy and it works with anybody.

    This is how you can do it yourself:

    1) Hold a glass and fill it up half full

    2) Now learn this awesome HACK

    you'll be 2lbs skinnier when you wake up!

    ReplyDelete

Post a Comment

Popular posts from this blog

what are the causes to Improve Network Security

Python: High Programming Language in the Market

History of Network Operating Systems