03-25-2018, 07:16 PM
(This post was last modified: 03-25-2018, 07:24 PM by Spork Schivago.)
Hrmm, this didn't recover the password successfully. Let me post my command line, and perhaps you could tell me if I passed the correct parameters to hashcat:
Now, obviously, I downloaded the toggles-lm-ntlm.rule file from the link you provided and I put the found LM password in the lm-passwords.txt file. Here's the contents of that file:
Here's my /tmp/hash.txt file:
Everything look alright to you?
This is for a Windows Server 2003 R2 server....
**EDIT:
I see one run that it makes, and this is the output:
What am I missing here?
Code:
./hashcat64.bin -m 1000 -a 0 --session="Windows Server 2003 NTLM" --restore-file-path=./winserv2003_ntlm.restore -O -o ./found_ntlm_passwd /tmp/hash.txt --rules ./rules/toggles-lm-ntlm.rule lm-passwords.txtNow, obviously, I downloaded the toggles-lm-ntlm.rule file from the link you provided and I put the found LM password in the lm-passwords.txt file. Here's the contents of that file:
Code:
CHoKL0cK192O$Here's my /tmp/hash.txt file:
Code:
7b9da04e2cbc851f27a3a9aae8afd318Everything look alright to you?
This is for a Windows Server 2003 R2 server....
**EDIT:
I see one run that it makes, and this is the output:
Code:
Session..........: Windows Server 2003 NTLM
Status...........: Exhausted
Hash.Type........: NTLM
Hash.Target......: 7b9da04e2cbc851f27a3a9aae8afd318
Time.Started.....: Sun Mar 25 13:22:09 2018 (0 secs)
Time.Estimated...: Sun Mar 25 13:22:09 2018 (0 secs)
Guess.Base.......: File (lm-passwords.txt)
Guess.Mod........: Rules (./rules/toggles-lm-ntlm.rule)
Guess.Queue......: 1/1 (100.00%)
Speed.Dev.#1.....: 96846 H/s (0.28ms) @ Accel:64 Loops:32 Thr:1024 Vec:1
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 16384/16384 (100.00%)
Rejected.........: 0/16384 (0.00%)
Restore.Point....: 1/1 (100.00%)
Candidates.#1....: cHOkl0Ck192o$ -> chOkl0Ck192o$
HWMon.Dev.#1.....: Temp: 44c Fan: 31%
Started: Sun Mar 25 13:22:06 2018
Stopped: Sun Mar 25 13:22:09 2018