Monday 20 May 2013

Compiling Jumbo John (JTR) for MSCACHE Password Auditing

So to attempt a password audit on MSCACHE v2 password hashes you will need to compile John The Ripper Jumbo.

$ wget http://openwall.com/john/g/john-1.7.9-jumbo-7.tar.gz

$ tar zxvf john-1.7.9-jumbo-7.tar.gz

$ cd john-1.7.9-jumbo-7/src/

$ make linux-x86-64 (for 64 bit OS)

$ sudo make install

John will be found in the 'run' directory

$ cd ../run

$ ./john --format=mscash {dumpfile.cap}

Loaded X password hashes with X different salts (M$ Cache Hash MD4 [32/64])

HTH

No comments:

Post a Comment