Issue with NTLM - Printable Version +- hashcat Forum (https://hashcat.net/forum) +-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html) +--- Forum: Old hashcat Support (https://hashcat.net/forum/forum-20.html) +--- Thread: Issue with NTLM (/thread-2879.html) |
Issue with NTLM - wesallen - 11-29-2013 Hey, hope all is well. I am working on cracking some NTLM hashes. I am pretty sure I have the format correct and have matching plaintext for a small sample, but was having no luck. So, tried a couple different versions, .44,.45,.46 32bit on The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali) and 64 bit on unbuntu 13, and even when using the NTLM sample files, no luck: root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~# hashcat -m=1000 /root/hashcat-0.46/examples/A0.M1000.hash /root/hashcat-0.46/examples/A0.M1000.word This copy of hashcat will expire on 01.01.2013. Please upgrade to continue using hashcat. Initializing hashcat v0.44 by atom with 8 threads and 32mb segment-size... Added hashes from file /root/hashcat-0.46/examples/A0.M1000.hash: 10 (1 salts) NOTE: press enter for status-screen Input.Mode: Dict (/root/hashcat-0.46/examples/A0.M1000.word) Index.....: 1/1 (segment), 10 (words), 119 (bytes) Recovered.: 0/10 hashes, 0/1 salts Speed/sec.: - plains, - words Progress..: 10/10 (100.00%) Running...: --:--:--:-- Estimated.: --:--:--:-- Started: Fri Nov 29 07:04:48 2013 Stopped: Fri Nov 29 07:04:48 2013 But, this seems to work: root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~# hashcat /root/hashcat-0.46/examples/A0.M0.hash /root/hashcat-0.46/examples/A0.M0.word This copy of hashcat will expire on 01.01.2013. Please upgrade to continue using hashcat. Initializing hashcat v0.44 by atom with 8 threads and 32mb segment-size... Added hashes from file /root/hashcat-0.46/examples/A0.M0.hash: 102 (1 salts) NOTE: press enter for status-screen f9d68a3ef957245f752783b73959c2db:,n`eP,LxFL&T3J:paxxR1 06d714a833cbffc22f0fd686699e4b3a:vs\/u| bc82d57d2a481df9a479346159beef8e:'>+S:T[1\*k>4uX@:2o}hNI9FtzeF\PST*`^GB6CK9\at+Q`G 6d15416d179f0444989e5a6d8193c5ad:&yg0#<RiAR:OF@M@K5^IU\ 8f0f1cd4790cf5ab7ba473a1e968201f:8+`I d3e6c8412ab76c9d24276d762a3af5fd:y?'c^+?'rZ1DJbO<vim`L*/MYibPQRKmb]3Y!!eZ d32ce18738d408462d4676bd15fc4c10:Zd`kQ5>7{ ...etc Anythoghts? RE: Issue with NTLM - wesallen - 11-29-2013 So, just to put this up there in case anyone else runs into this - the switch should be -m 1000 NOT -m=1000 that fixed my problem. RE: Issue with NTLM - atom - 11-29-2013 thx |