Mailing List Archive

FYI.

NTLM = md4(ascii2unicode(‘password’))

Regards,

Miguel


Sztano.Zsolt@ing.hu wrote:
> Hi,
>
> I would like to ask how to format the NTLM hash (and if it's true that
> NTLM is pure MD4 of the user password).
> I have filled the password field for the user account: *scanuser*,
> domain: *companydomain*, the password:
> *1F533C644A8D1709F8B255533096C679*, changed the SMB password type
> field: *NTLM Hash*, but the domain locked the user out (bad password).
> Am I missing something?
>
> Thanks,
> Zsolt
>
>
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

Miguel,

I know I've done something wrong. Using md5 instead of md4 and ascii
instead of utf16. Everything else was fine :)
Now it works.

Thanks a lot,
Zsolt

-----Original Message-----
From: nessus-bounces@list.nessus.org
[mailto:nessus-bounces@list.nessus.org] On Behalf Of Miguel Dilaj
Sent: Monday, August 11, 2008 2:56 PM
Cc: nessus@list.nessus.org
Subject: Re: Nessus 3 NTLM password usage

FYI.

NTLM = md4(ascii2unicode('password'))

Regards,

Miguel


Sztano.Zsolt@ing.hu wrote:
> Hi,
>
> I would like to ask how to format the NTLM hash (and if it's true that

> NTLM is pure MD4 of the user password).
> I have filled the password field for the user account: *scanuser*,
> domain: *companydomain*, the password:
> *1F533C644A8D1709F8B255533096C679*, changed the SMB password type
> field: *NTLM Hash*, but the domain locked the user out (bad password).
> Am I missing something?
>
> Thanks,
> Zsolt
>
>
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
-----------------------------------------------------------------
ATTENTION:
The information in this electronic mail message is private and
confidential, and only intended for the addressee. Should you
receive this message by mistake, you are hereby notified that
any disclosure, reproduction, distribution or use of this
message is strictly prohibited. Please inform the sender by
reply transmission and delete the message without copying or
opening it.

Messages and attachments are scanned for all viruses known.
If this message contains password-protected attachments, the
files have NOT been scanned for viruses by the ING mail domain.
Always scan attachments before opening them.
-----------------------------------------------------------------
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus