Penetration Testing mailing list archives

Re: [PEN-TEST] NT 4.0 and MD4 Hash


From: "Renshaw, Rick (R.)" <rrenshaw () FORD COM>
Date: Wed, 6 Dec 2000 16:19:42 -0500

Little endian, it would be "6D0061006700690063000000".  Each character is 16
bits long, with the most significant 8 bits all 0.


-----Original Message-----
From: Chad Gough [mailto:chad131 () YAHOO COM]
Sent: Wednesday, December 06, 2000 2:11 PM
To: PEN-TEST () SECURITYFOCUS COM
Subject: Re: NT 4.0 and MD4 Hash


So what would the exact string look like??

I'm not using VB instead of C for my conversions, but it shouldn't
matter should it??


What does "magic" look like UTF-8 encoded.  Then i need to MD4 hash
that string to get the save value from L0pht.

I can't duplicate ANY of it!?

Thanks




--- Frank Heyne <fh () rcs urz tu-dresden de> wrote:
On 6 Dec 2000, at 6:11, Chad Gough wrote:

 I get the string "6D61676963" from a unicode conversion of
magic.

There is your error. An unicode character is 16 bit, this means you
need
to add 00 to every character. The string "magic" in Unicode is 12
bytes
long (with 0x0000 as delimiter)





Frank Heyne




__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/


Current thread: