Hi Folks,
I have to do some work on an NT4 machine and I need to somehow
get the password of an account , are there any utils to do this?
Hopefully some OCuk windows Guru can help me.
NT4 uses LMHASH to store passwords and LMHASH is weak, very weak.
You can brute force the password in several hours on a modern PC and hence recover the original without resetting it. LMHASH has a max password length of 14 ASCII characters, which equates to 2^94 possible passwords. However the hash also stores them in separate halves of 7 characters each (lol). What this means is you can attack each 7 character half in parallel and each half has a maximum of 2^46 possible passwords. You can easily brute force all the keyspace of a 2^46 character password on a modern PC
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.