Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: December 25, 2024 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 76 Members: 0 Total: 76 Full disclosure CyberDanube Security Research 20241219-0 | Authenticated Remote Code Execution in Ewon Flexy 205 Stored XSS with Filter Bypass - blogenginev3.3.8 [SYSS-2024-085]: Broadcom CA Client Automation - Improper Privilege Management (CWE-269) [KIS-2024-07] GFI Kerio Control <= 9.4.5 Multiple HTTP Response Splitting Vulnerabilities RansomLordNG - anti-ransomware exploit tool APPLE-SA-12-11-2024-9 Safari 18.2 APPLE-SA-12-11-2024-8 visionOS 2.2 APPLE-SA-12-11-2024-7 tvOS 18.2 APPLE-SA-12-11-2024-6 watchOS 11.2 APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 APPLE-SA-12-11-2024-4 macOS Sonoma 14.7.2 APPLE-SA-12-11-2024-3 macOS Sequoia 15.2 APPLE-SA-12-11-2024-2 iPadOS 17.7.3 APPLE-SA-12-11-2024-1 iOS 18.2 and iPadOS 18.2 SEC Consult SA-20241211-0 :: Reflected Cross-Site Scripting in Numerix License Server Administration System Login IT Security and Insecurity Portal www.waraxe.us Forum Index -> All other hashes -> LM and NTLM Hash decryption Goto page Previous1, 2, 3 ... 70, 71, 72 ... 76, 77, 78Next View previous topic :: View next topic Posted: Thu May 03, 2012 12:05 pm Mullog Advanced user Joined: Aug 29, 2010 Posts: 540 Ok it seems that LANMAN is disabled and NTMLv1 only is in use because the LM hash and NT hash are the same and ofc on the pics it also says NTMLv1 or NTLM + challenge only. Its not that easier to crack the pw It would be better if LM where also enabled. But I will give it a try but I doubt that I will find it Posted: Thu May 03, 2012 12:16 pm dev1712 Regular user Joined: May 02, 2012 Posts: 11 Mullog wrote: Ok it seems that LANMAN is disabled and NTMLv1 only is in use because the LM hash and NT hash are the same and ofc on the pics it also says NTMLv1 or NTLM + challenge only. Its not that easier to crack the pw It would be better if LM where also enabled. But I will giv it a try Thanks a lot Mullog. I was doing some more research on Cain and Abel and found out about challenge spoofing. I was able to generate an NTLMv1 hash with a spoofed challenge. You can check out the same at the link below if it is of any help to you. http://i49.tinypic.com/qss5u8.jpg The most frustrating thing is that my laptop has been scheduled to perform a daily incremental backup on the network hard drive (Apple's Time Capsule) but I can't somehow access it directly. I am pretty sure that the login details are stored somewhere in my laptop but don't know where. I have checked Credentials Manager, but of no use. Therefore, I have to use these complex methods to be able to break into the network hard drive. Posted: Thu May 03, 2012 12:22 pm dev1712 Regular user Joined: May 02, 2012 Posts: 11 Mullog wrote: Ok it seems that LANMAN is disabled and NTMLv1 only is in use because the LM hash and NT hash are the same and ofc on the pics it also says NTMLv1 or NTLM + challenge only. Its not that easier to crack the pw It would be better if LM where also enabled. But I will give it a try but I doubt that I will find it Also, since my laptop has access to the network hard drive if there is a way to further downgrade from 'NTLMv1 + Challenge' to 'LM', please let me know. I will do it and generate another hash, by performing a backup, and post it here. In short I can generate the hash anytime by clicking on the backup button. If you know of a way to generate a hash that follows LM, please let me know. Posted: Thu May 03, 2012 12:40 pm Mullog Advanced user Joined: Aug 29, 2010 Posts: 540 I think now you can attack it with rainbow tables but I'm not sure and I do not have them. Sorry I dont know how to do that. How did you changed it to NTMLv1 in first place ? In the registry? If there is anything with Compatibility or Level change it to 0 Posted: Thu May 03, 2012 12:50 pm dev1712 Regular user Joined: May 02, 2012 Posts: 11 Mullog wrote: I think now you can attack it with rainbow tables but I'm not sure and I do not have them. Sorry I dont know how to do that. How did you changed it to NTMLv1 in first place ? In the registry? If there is anything with Compatibility or Level change it to 0 Changed it from Local Security Settings. Actually, I also found out a way to force my laptop to generate LM hash (after reading your last post) but it will work only after my company's IT administrator resets the password (as we can not generate a weaker hash for the same password). Posted: Thu May 03, 2012 12:59 pm Mullog Advanced user Joined: Aug 29, 2010 Posts: 540 Ok so no LM hash then? I found something that may help http://social.msdn.microsoft.com/Forums/en-US/os_interopscenarios/thread/c8f488ed-1b96-4e06-bd65-390aa41138d1 or http://social.technet.microsoft.com/Forums/en-US/w7itpronetworking/thread/e1113944-6a5d-4ade-8590-90d1bae25b73/ post nr.3 ps: no result for your hash Posted: Thu May 03, 2012 1:10 pm dev1712 Regular user Joined: May 02, 2012 Posts: 11 Mullog wrote: Ok so no LM hash then? I found something that may help http://social.msdn.microsoft.com/Forums/en-US/os_interopscenarios/thread/c8f488ed-1b96-4e06-bd65-390aa41138d1 or http://social.technet.microsoft.com/Forums/en-US/w7itpronetworking/thread/e1113944-6a5d-4ade-8590-90d1bae25b73/ post nr.3 I have already done all this. It does not help because besides my local security settings the default settings of the network hard drive also matter. I may tone down my Local Security Settings to the lowest extent possible but still there are some default security settings at the network location which I can not tweak, in which case my laptop (client) will adapt to the security settings of the network location. Posted: Thu May 03, 2012 1:34 pm Mullog Advanced user Joined: Aug 29, 2010 Posts: 540 aah ok know I understand ^^ I thought you can change the the security settings of the network hard drive, too(In retrospect, its very stupid from me ). Maybe there is an exploit but with such things I cant help you, sorry. Posted: Thu May 03, 2012 1:58 pm dev1712 Regular user Joined: May 02, 2012 Posts: 11 Mullog wrote: aah ok know I understand ^^ I thought you can change the the security settings of the network hard drive, too(In retrospect, its very stupid from me ). Maybe there is an exploit but with such things I cant help you, sorry. Yes. But you are at least going to try to decrypt the hash for me, isn't it?? Please don't say no. Posted: Thu May 03, 2012 4:31 pm Mullog Advanced user Joined: Aug 29, 2010 Posts: 540 yes but its looking bad Posted: Thu May 03, 2012 4:36 pm dev1712 Regular user Joined: May 02, 2012 Posts: 11 Mullog wrote: yes but its looking bad Yes, I thought so otherwise there would have been a lot of search results on the internet. Posted: Thu May 03, 2012 5:33 pm Mullog Advanced user Joined: Aug 29, 2010 Posts: 540 OneGuy wrote: Plz crack th e first part of this LM&NTLM+Challenge hash Code: 81A50FD991CD11F24DAA83A3F77B56EE834AEE2A7A26F476:7EBAE76F67F0D2A37B0044D3BDF8350169812342D79CAE29:1122334455667788 Result: ???????L1# Many thanx Sailsail1# OneGuy wrote: Please crak this LM&NTLM+Challenge Code: 9BFEB79136472857192706DFFDECA14CC7EEDE96E30422D4:A3C34983F4765D799FD43A6C3223DA34A1133B6C1391B52E:1122334455667788 Thanx 9BFEB79136472857192706DFFDECA14CC7EEDE96E30422D4:JULLANA??????? OneGuy wrote: Anyone can help me crack this LM&NTLM+Challenge hash Code: 0C4A7AA399CBE62E95E22FA6C5DCCABD2F85252CC731BB25:7A546774795F70EDCC2FC20A643899F8BE9C989BAC08050F:1122334455667788 Thanx 0C4A7AA399CBE62E95E22FA6C5DCCABD2F85252CC731BB25:KASBAH@??????? Posted: Fri May 04, 2012 5:13 am dev1712 Regular user Joined: May 02, 2012 Posts: 11 Hello Mullog Looks like it is indeed possible to break NTLM + Challenge hash. Have you been able to make much headway into the hash I submitted? Eagerly waiting for that. Posted: Fri May 04, 2012 4:01 pm Mullog Advanced user Joined: Aug 29, 2010 Posts: 540 Yeah but only with LM hash you can see because there are only cpu based cracker out there who can handle LM/NTLM + Challenge hashes its looking very bad for your hash. I tried wordlists with some rules and BF but without a result, sry. Have you any hints how the pw could look like? I think if the admin understands just a little bit of password security it will be impossible to crack with wordlists and will take too long with brute force. Posted: Fri May 04, 2012 4:23 pm dev1712 Regular user Joined: May 02, 2012 Posts: 11 Hmmm yes I agree. Let me try to generate the LM hash also by some way. Thanks a lot for all your efforts. LM and NTLM Hash decryption www.waraxe.us Forum Index -> All other hashes You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 71 of 78 Goto page Previous1, 2, 3 ... 70, 71, 72 ... 76, 77, 78Next All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.056 Seconds