Please ask questions ONLY in this topic.

[Phatnoir]

Ok, I tried JTR and it told me "access is denied" when I tried running it. I looked online and it seemed to me that this was a problem running JTR in vista. I tried Cain, but I must be doing it wrong because I can't get it. Am I hosed on this one or do I need to think about Cain some more... it's hurting my head.

[insomaniacal]

Cain should do the trick, though I used JTR for this one...

Remember, there's more than one kind of attack to use against the hash.

[Phatnoir]

Ok, after having read this entire forum 3 times and scouring the interwebs, I have decided that there is no possible way for me to use JTR on vista. Short of installing a different OS, I think I'm hosed. There's about 3-4 references in here about how this hash should be able to be cracked in C&A but no one has said, "Yes, I did it with C&A", so I've given up on that program. There was one person who said they got it to work with passwordpro, and I've at least gotten somewhere using that program but I think I'm doing it wrong. I selected it as MD*(U**x) to be brute forced, which is what I thought this hash was, and it's taking far longer than people are saying it should take. Can someone double check that this is possible using C&A or Passwordpro on vista? If it isn't, I give up.

[Defience]

Ok, I tried JTR and it told me "access is denied" when I tried running it. I looked online and it seemed to me that this was a problem running JTR in vista. I tried Cain, but I must be doing it wrong because I can't get it. Am I hosed on this one or do I need to think about Cain some more... it's hurting my head.

On Vista you have to run JTR 'as administrator' so right click on the CMD prompt and choose 'run as administrator' first. That should do the trick.

[Phatnoir]

Ok, I tried JTR and it told me "access is denied" when I tried running it. I looked online and it seemed to me that this was a problem running JTR in vista. I tried Cain, but I must be doing it wrong because I can't get it. Am I hosed on this one or do I need to think about Cain some more... it's hurting my head.

On Vista you have to run JTR 'as administrator' so right click on the CMD prompt and choose 'run as administrator' first. That should do the trick.

Well, I feel dumb. That worked on the first try. I remember running as an administrator before and it not working. The only thing I can figure was different the second time is that I turned my anti-virus off since it kept thinking that it was a trojan horse. Just for reference though, how does one do this with C&A or Passwordpro? What are the advantages of using one program over the other? Should I keep all three or just keep JTR? Thanks Defience!

[Defience]

Ok, I tried JTR and it told me "access is denied" when I tried running it. I looked online and it seemed to me that this was a problem running JTR in vista. I tried Cain, but I must be doing it wrong because I can't get it. Am I hosed on this one or do I need to think about Cain some more... it's hurting my head.

On Vista you have to run JTR 'as administrator' so right click on the CMD prompt and choose 'run as administrator' first. That should do the trick.

Well, I feel dumb. That worked on the first try. I remember running as an administrator before and it not working. The only thing I can figure was different the second time is that I turned my anti-virus off since it kept thinking that it was a trojan horse. Just for reference though, how does one do this with C&A or Passwordpro? What are the advantages of using one program over the other? Should I keep all three or just keep JTR? Thanks Defience!

You're welcome. I've never used Passwordpro but have both JTR and C&A. I don't know how C&A worked for anyone on this mission because of the format of the hash, which is how JTR runs it (I don't think C&A can crack DES) but there is a lot that C&A can do...from sniffing, cracking, Man-in the-Middle attacks, etc...I'd at least keep those 2.

[goluhaque]

nevr mind. did it. actually i was looking elsewhere.(for those who crack it with JTR in win Vista 32 bit, try to run cmd as Administrator)

[barthalamew133]

Well i have no idea what to do....i found the login page(that was easy) but i have to idea how the **** to get the hash!! I have tried everything. I know it is a .htpasswd file but i have no idea how to find it or get access to it(everything i try says i cant view that file) and trust me i have tried ALOT of different ways. If anybody can help lead me in the right direction that would be great..

[faazshift]

@barthalamew133: So, you found the right directory, right? If so, could there be something else on the site that will (unintentionally) let you view certain files? Beyond that, theres plenty on cracking the hash above. I don't dare say more, but its a fairly easy mission.

[rockangel]

Anyone having trouble running JTR should run the command prompt as administrator. If that does not work run john-mmx.exe rather than john-386.exe. I believe the later is for 32 bit systems and the former is for 64 bit. The former kept triggering my antivirus and when I added it to exceptions it would still say access denied. As soon as I used john-mmx it worked, with antivirus on immediately.

Does anyone know how to change the hash into a format so that it works with Cain? I would prefer to only use one program if possible.

Thanks