In a problem set, we've been asked to use John The Ripper to crack a list of Win LANMAN passwords.
They are of the following form: 953A55E36AB85C0B9DA92C18555E42E1:0169295E0A6A6B35B2DD9932D10C1978
From my understanding LM Hash passwords are limited to 14 characters (if they are shorter padding bits are added) and that the characters must come from the set of 95 printable ASCII characters. Also that all characters are forced to uppercase.
A Question: Why are is the password so long? why is it split into two halves? When I try to run ./john passwrds it says it's attempting to crack 6 hashed passwords instead of three (splitting up each password by the ':').
Also is it a good approach to use either of these (found in john.conf)
[Incremental:ASCII] File = $JOHN/ascii.chr MinLen = 0 MaxLen = 13 CharCount = 95 [Incremental:LM_ASCII] File = $JOHN/lm_ascii.chr MinLen = 0 MaxLen = 7 CharCount = 69
If this question is more appropriate for the security stack exchange website please flag for migration.