recovering Users Pa...
 
Notifications
Clear all

recovering Users Password from Forensic image

12 Posts
5 Users
0 Reactions
14.5 K Views
(@psalmtopzy)
Active Member
Joined: 7 years ago
Posts: 5
Topic starter  

Hello,thanks for helping.I got the four users password hash already…and i was able to decrypt two using an on-line hash-cracker…but unable to decrypt two yet….i used the ophcrack..but i couldn't decrypt the password tried using cain and abel still the same,but i was also thinking john the ripper should be okay…but i have been unable to install john the ripper on my sift workstation.These are the list of command i ran to install john-the-ripper$sudo apt-get install john
$sudo aptitude john
$sudo apt-get install john-the-ripper.
after trying this command i was still unable to download john the ripper. Though i have ophcrack on my sift i dont know if i will be able to decrypt the passowrd hash on sift even though i have tried it on windows ophcrack also if i could get another hash decypter.Looking forward to you answers.THANKS A LOT


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Hello,thanks for helping.I got the four users password hash already…and i was able to decrypt two using an on-line hash-cracker…but unable to decrypt two yet….i used the ophcrack..but i couldn't decrypt the password tried using cain and abel still the same,but i was also thinking john the ripper should be okay…but i have been unable to install john the ripper on my sift workstation.These are the list of command i ran to install john-the-ripper$sudo apt-get install john
$sudo aptitude john
$sudo apt-get install john-the-ripper.
after trying this command i was still unable to download john the ripper. Though i have ophcrack on my sift i dont know if i will be able to decrypt the passowrd hash on sift even though i have tried it on windows ophcrack also if i could get another hash decypter.Looking forward to you answers.THANKS A LOT

That's OK, as it won't likely do anything.

John the Ripper is essentially a "brute force and dictionary password cracker" (though with some very good features/additions/options), see
https://www.win.tue.nl/~aeb/linux/john/john.html

It will either take forever or find nothing (or find exactly the same that Ophcrack will find) in a "reasonable" time.

The Ophcrack approach is usually faster, but since it failed (partially) in your case, you may want to try Hashcat/oclhashcat
https://hashcat.net/wiki/doku.php?id=hashcat
https://hashcat.net/wiki/doku.php?id=oclhashcat_lite
see also
https://www.reddit.com/r/crypto/comments/yuqyi/john_the_ripper_vs_oclhashcatlite/

or RainbowCrack
http//project-rainbowcrack.com/

Of course actual performance will depend on what hardware you have available.

jaclaz


   
ReplyQuote
Page 2 / 2
Share: