nerdexam
GIAC

GCIH · Question #834

What john format should be specified to crack an 18 character Windows password?

The correct answer is C. NT. Windows NTLM (NT) hashes support passwords of any length, while LAN Manager hashes are capped at 14 characters and cannot represent an 18-character password.

Vulnerability Exploitation & Privilege Escalation

Question

What john format should be specified to crack an 18 character Windows password?

Options

  • ALANMAN
  • BSHA256
  • CNT
  • DMS-CACHE

How the community answered

(57 responses)
  • A
    2% (1)
  • B
    5% (3)
  • C
    91% (52)
  • D
    2% (1)

Why each option

Windows NTLM (NT) hashes support passwords of any length, while LAN Manager hashes are capped at 14 characters and cannot represent an 18-character password.

ALANMAN

LANMAN hashes split the password into two 7-character halves before hashing, making it impossible to represent any password longer than 14 characters.

BSHA256

SHA256 is a general-purpose cryptographic hash and is not a Windows password storage format recognized by John the Ripper for SAM/NTLM hashes.

CNTCorrect

The NT hash format in John the Ripper uses MD4 applied to the full Unicode representation of the password, supporting Windows passwords of any length including 18 characters. LAN Manager hashes split input into two 7-character chunks and therefore cannot store passwords longer than 14 characters. NT is the correct format for cracking NTLM password hashes stored in the Windows SAM database or extracted from memory.

DMS-CACHE

MS-CACHE (Domain Cached Credentials) is a separate hash type used to store cached domain logon credentials locally and is distinct from local account NT hashes.

Concept tested: Windows NT hash format for password cracking

Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/passwords-technical-overview

Topics

#password cracking#NTLM hash#John the Ripper#LANMAN limitations

Community Discussion

No community discussion yet for this question.

Full GCIH Practice