+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: How do I crack a Windows XP hash with John The Ripper? (/showthread.php?tid=4635432)
How do I crack a Windows XP hash with John The Ripper? - u534D - Jan 13, 2015
So I some virtual machines set up. I used metasploit to get shell on my Windows XP SP1 machine. Don't laugh. I'm new at this. I dumped the password hash and now I need to crack it but I'm getting this error.
Loaded 1 password hash (NT MD4 [128/128 X2 SSE2-16])
No password hashes left to crack (see FAQ)
I get the error regardless of the --format I use.
john --format=NT2 --wordlist=/root/Desktop/rockyou.txt /root/Desktop/hashes.txt
I'm not sure if my command line syntax is wrong of or if it has something to do with the hash file. I followed the documentation on openwall.
Is there something I forgot to include in my commands?
* - chick3nman - Jan 13, 2015
(Jan 13, 2015 05:47 PM)u534D Wrote: So I some virtual machines set up. I used metasploit to get shell on my Windows XP SP1 machine. Don't laugh. I'm new at this. I dumped the password hash and now I need to crack it but I'm getting this error.
Loaded 1 password hash (NT MD4 [128/128 X2 SSE2-16])
No password hashes left to crack (see FAQ)
I get the error regardless of the --format I use.
john --format=NT2 --wordlist=/root/Desktop/rockyou.txt /root/Desktop/hashes.txt
I'm not sure if my command line syntax is wrong of or if it has something to do with the hash file. I followed the documentation on openwall.
Is there something I forgot to include in my commands?
I'm not fully sure but it looks like it's not loading your hash correctly because it doesn't recognize it maybe? Do you have the raw hash? Because you can feed it into other applications like hashcat or even websites to have it cracked instead of john the ripper. I've never been a huge fan of JTR, just because of personal preferences mostly.
* - u534D - Jan 13, 2015
Not sure on hashcat commands. I'll have to read though that another time.
* - chick3nman - Jan 13, 2015
(Jan 13, 2015 08:45 PM)u534D Wrote: Not sure on hashcat commands. I'll have to read though that another time.
It's fairly easy, i can help you get it started.
* - Forezza - Jan 13, 2015
With hashcat / oclHashcat, just download the GUI and make the attacks you want through the GUI then generate the output command. You'll eventually figure it out :P
* - u534D - Jan 13, 2015
(Jan 13, 2015 09:16 PM)Forezza Wrote: With hashcat / oclHashcat, just download the GUI and make the attacks you want through the GUI then generate the output command. You'll eventually figure it out :P
That sounds good. I'll crack this thing yet.
Installs via apt. That's also always a bonus.
apt-get install oclhashcat
But then when I run it oclhashcat I get this message.
ERROR: This copy of oclHashcat is outdated. Get a more recent version.
What does that even mean? I just installed it.
* - Forezza - Jan 13, 2015
The GUI is windows only though :P. If you want us to help out with the cracking then there are plenty of people who will help out if you PM / post the hash.
* - u534D - Feb 25, 2015
Crap I totally forgot to check this thread back. I ended up cracking it with Ophcrack. It took all of three seconds once I figured out how to set up the tables and use the interface. Pretty easy.