[u534D]

So I some virtual machines set up. I used metasploit to get shell on my Windows XP SP1 machine. Don't laugh. I'm new at this. I dumped the password hash and now I need to crack it but I'm getting this error.

Loaded 1 password hash (NT MD4 [128/128 X2 SSE2-16])
No password hashes left to crack (see FAQ)

I get the error regardless of the --format I use.

john --format=NT2 --wordlist=/root/Desktop/rockyou.txt /root/Desktop/hashes.txt

I'm not sure if my command line syntax is wrong of or if it has something to do with the hash file. I followed the documentation on openwall.

Is there something I forgot to include in my commands?

[chick3nman]

So I some virtual machines set up. I used metasploit to get shell on my Windows XP SP1 machine. Don't laugh. I'm new at this. I dumped the password hash and now I need to crack it but I'm getting this error.

Loaded 1 password hash (NT MD4 [128/128 X2 SSE2-16])
No password hashes left to crack (see FAQ)

I get the error regardless of the --format I use.

john --format=NT2 --wordlist=/root/Desktop/rockyou.txt /root/Desktop/hashes.txt

I'm not sure if my command line syntax is wrong of or if it has something to do with the hash file. I followed the documentation on openwall.

Is there something I forgot to include in my commands?

I'm not fully sure but it looks like it's not loading your hash correctly because it doesn't recognize it maybe? Do you have the raw hash? Because you can feed it into other applications like hashcat or even websites to have it cracked instead of john the ripper. I've never been a huge fan of JTR, just because of personal preferences mostly.

[u534D]

Not sure on hashcat commands. I'll have to read though that another time.

[chick3nman]

Not sure on hashcat commands. I'll have to read though that another time.

It's fairly easy, i can help you get it started.

[Forezza]

With hashcat / oclHashcat, just download the GUI and make the attacks you want through the GUI then generate the output command. You'll eventually figure it out :P

[u534D]

With hashcat / oclHashcat, just download the GUI and make the attacks you want through the GUI then generate the output command. You'll eventually figure it out :P

That sounds good. I'll crack this thing yet.

Installs via apt. That's also always a bonus.
apt-get install oclhashcat

But then when I run it oclhashcat I get this message.

ERROR: This copy of oclHashcat is outdated. Get a more recent version.

What does that even mean? I just installed it.

[Forezza]

The GUI is windows only though :P. If you want us to help out with the cracking then there are plenty of people who will help out if you PM / post the hash.

[u534D]

Crap I totally forgot to check this thread back. I ended up cracking it with Ophcrack. It took all of three seconds once I figured out how to set up the tables and use the interface. Pretty easy.