Breakin encryption.Blowfish

Just trying to clarify a doubt…..

Did you actually generate a SHA1 hash for a…abc.. complex etc and see if it matches with the "suspect" hash.

If it does - this makes blofish really very insecure..

If you need a password list then use the FTK to create a complete dictionary from the contents of the drive and then run the list thru JTR.

Regards

That idea seems great! Thank you so much. I'll try it in the next case I need a password from a user.