312-50V13 · Question #123
Which of the following LM hashes represent a password of less than 8 characters? (Choose two.)
The correct answer is B. 44EFCE164AB921CQAAD3B435B51404EE E. B757BF5C0D87772FAAD3B435B51404EE. LM hashes for passwords less than 8 characters long will show AAD3B435B51404EE in their second 8-byte segment due to the algorithm's padding and hashing process.
Question
Options
- ABA810DBA98995F1817306D272A9441BB
- B44EFCE164AB921CQAAD3B435B51404EE
- C0182BD0BD4444BF836077A718CCDF409
- DCEC52EB9C8E3455DC2265B23734E0DAC
- EB757BF5C0D87772FAAD3B435B51404EE
- FE52CAC67419A9A224A3B108F3FA6CB6D
How the community answered
(33 responses)- A9% (3)
- B85% (28)
- D3% (1)
- F3% (1)
Why each option
LM hashes for passwords less than 8 characters long will show `AAD3B435B51404EE` in their second 8-byte segment due to the algorithm's padding and hashing process.
This hash does not contain the `AAD3B435B51404EE` pattern in its second half, indicating a password of 8 characters or more.
The LM hashing algorithm pads passwords shorter than 7 characters with nulls to 7 characters and passwords between 8 and 14 characters with nulls to 14. If a password is less than 8 characters, the second 7-character block will consist of nulls, and when this block is encrypted with DES, it consistently produces the hash `AAD3B435B51404EE`.
This hash does not contain the `AAD3B435B51404EE` pattern in its second half, indicating a password of 8 characters or more.
This hash does not contain the `AAD3B435B51404EE` pattern in its second half, indicating a password of 8 characters or more.
Similar to option B, option E also contains `AAD3B435B51404EE` in its second 8-byte segment, which is the specific indicator that the original password was less than 8 characters long when hashed using the LM algorithm.
This hash does not contain the `AAD3B435B51404EE` pattern in its second half, indicating a password of 8 characters or more.
Concept tested: LM hash vulnerability (short passwords)
Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc759524(v=ws.10)
Topics
Community Discussion
No community discussion yet for this question.