cachedump output & rainbow tables

[shakenbake]

I can't find any references to using rainbow tables on the cachedump hash.

Is this possible?

[morganlefay]

Well in the right corner of the AO home page there is a search feature

I suggest you try

password hash

password cache

both of which has turned up pages and pages of information

Unless you want me to read them for you too....


MLF

[.:front2back:.]

Originally posted here by morganlefay
Unless you want me to read them for you too....
MLF

Could you read them for me? I'm to tired at the moment.

[Katmando]

Originally posted here by shakenbake
I can't find any references to using rainbow tables on the cachedump hash.

Is this possible?

The cahce dump needs to be brute forced to retrieve the password.

Katmando

[shakenbake]

Originally posted here by morganlefay
Well in the right corner of the AO home page there is a search feature

I suggest you try

password hash

password cache

both of which has turned up pages and pages of information

Unless you want me to read them for you too....


MLF

If you'd like to find a link with an answer to my question in it (as opposed to just mouthing off), please feel free.



Katmando, thank you.

[morganlefay]

I guess that means you want me to read them all for you...

Then provide the appropriate link...to the one that I feel will help you most...

Or a nice list indexed and highlighted for you

...yeah...thats gonna happen.


Why dont you read some of the information...then come back and ask your questions

I gave you a perfectly good suggestion that has all the information you are requesting....
Do you want to be a little more specific...about what you looking for

My truck wont start...can you help me???

How about a link....


MLF

[shakenbake]

Would you like me to paint you a picture?

What can't you understand about the question? If you knew what rainbow tables are and what cachedump is, it's not terribly difficult to understand the question.

Katmando had no problem understanding the question ... Why do you think that is?

Why are you assuming that I've asked this question without searching for an answer first?

I think the issue here is that I've challenged your initial arrogant post, you've actually searched yourself in order to prove me wrong. You've found no thread with the information to mush back in my face and now you're asking me to be "more descriptive" to save your own face.

If you haven't got a clue what I'm talking about (or what you're talking about even) well then don't pollute the thread with shite talk to impress your peers in an attempt to belittle me. You've already made yourself look like a fool.

Now, toddle off away with you little man and get back to playing with superscan.

[morganlefay]

What can't you understand about the question? If you knew what rainbow tables are and what cachedump is, it's not terribly difficult to understand the question.

and I guess you have built you own rainbow table.....

Now want to use it agains a cache dump.

Wow...I am totally impressed....truly I am.

Why are you assuming that I've asked this question without searching for an answer first?

Because your question was vague....did you try the search option I suggested???

I think Irongeek has some info for you???....

Now, toddle off away with you little man and get back to playing with superscan.

Now....whos the little man...

Heres some reds to mush in your face....

MLF

[cacosapo]

Well, i've read MLF 1st poster and went to AO search facility and typed "password hash"

4th result is: "Tutorial:Cracking Cached Domain/Active Directory Passwords on Windows XP/2000/2003"
Voilá!

its a tutorial about cachedump and cracking using JTR.

So.. following the idea about using JTR , you can adapt it to use RT.

Veredict:
MLF was correct at first suggestion and you were very rude. Too bad for you.

[shakenbake]

If you think my question was vague, you're seriously delussional.

If you want to impress me, answer the question.

I've read Irongeeks paper, it's a very good read but it doesn't answer my question. Please direct me to the bit that does?

You see the bit I'm confussed over is that apparently cachedumps output is an MD4 hash, salted with the username. So I thought, if its possible that a table could at least be generated for the admin password, why doesn't one exist? Is their something specific to this algorithm/salt that prohibits its creation?

What's your expert opinion on it morganlefay?