GCIH · Question #834
What john format should be specified to crack an 18 character Windows password?
The correct answer is C. NT. Windows NTLM (NT) hashes support passwords of any length, while LAN Manager hashes are capped at 14 characters and cannot represent an 18-character password.
Question
What john format should be specified to crack an 18 character Windows password?
Options
- ALANMAN
- BSHA256
- CNT
- DMS-CACHE
How the community answered
(57 responses)- A2% (1)
- B5% (3)
- C91% (52)
- D2% (1)
Why each option
Windows NTLM (NT) hashes support passwords of any length, while LAN Manager hashes are capped at 14 characters and cannot represent an 18-character password.
LANMAN hashes split the password into two 7-character halves before hashing, making it impossible to represent any password longer than 14 characters.
SHA256 is a general-purpose cryptographic hash and is not a Windows password storage format recognized by John the Ripper for SAM/NTLM hashes.
The NT hash format in John the Ripper uses MD4 applied to the full Unicode representation of the password, supporting Windows passwords of any length including 18 characters. LAN Manager hashes split input into two 7-character chunks and therefore cannot store passwords longer than 14 characters. NT is the correct format for cracking NTLM password hashes stored in the Windows SAM database or extracted from memory.
MS-CACHE (Domain Cached Credentials) is a separate hash type used to store cached domain logon credentials locally and is distinct from local account NT hashes.
Concept tested: Windows NT hash format for password cracking
Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/passwords-technical-overview
Topics
Community Discussion
No community discussion yet for this question.