Penetration Testing mailing list archives
RE: Cracking Ettercap Generated hashes
From: "Shenk, Jerry A" <jshenk () decommunications com>
Date: Sat, 17 Nov 2007 08:10:37 -0500
I think cain would work well for that. You could try dictionary or brute force methods as well as a cryptanalysis using rainbow tables if you have the right ones built. -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Danux Sent: Friday, November 16, 2007 6:30 PM To: pen-test () securityfocus com Subject: Cracking Ettercap Generated hashes Hi Experts, After testing a client network, i got a hash through Ettercap(ARP Spoofing) , but when trying to cracking the hash with RainbowCrack it seems not to be a NTLM format, and nothing happens. Here i show the hash gathered: SMB : 172.16.16.135:445 -> USER: mjones HASH: mjones:"":"":1EA3083687301F2E00000000000000000000000000000000:2F8EDA1AD2 0B80974F86656996787855C5CF3417FD44BF03:BD9AE7964A5E989B DOMAIN: IMS Do you know how to crack hashes gathered from Ettercap(ARP Spoofing)? -- Danux, CISSP Chief Information Security Officer Macula Security Consulting Group www.macula-group.com ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------ **DISCLAIMER This e-mail message and any files transmitted with it are intended for the use of the individual or entity to which they are addressed and may contain information that is privileged, proprietary and confidential. If you are not the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received this communication in error, please notify the sender and delete this e-mail message. The contents do not represent the opinion of D&E except to the extent that it relates to their official business. ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Cracking Ettercap Generated hashes Danux (Nov 17)
- Re: Cracking Ettercap Generated hashes Jan Heisterkamp (Nov 17)
- Re: Cracking Ettercap Generated hashes Danux (Nov 24)
- Re: Cracking Ettercap Generated hashes Kurt Grutzmacher (Nov 17)
- RE: Cracking Ettercap Generated hashes Shenk, Jerry A (Nov 17)
- Re: Cracking Ettercap Generated hashes Jan Heisterkamp (Nov 17)