5 ms·
Micrsoft Active Directory stores what it calls an NT Hash in NTDS.DIT files on domain controllers. These are unsalted, md4 hashed, unicode strings. They are f
by 16s 16y ago
Micrsoft Active Directory stores what it calls an NT Hash in NTDS.DIT files on domain controllers.
These are unsalted, md4 hashed, unicode strings.
They are fast and easy to crack if you ever do get your hands on them. The point is that many big companies don't do passwords right, so why expect Gawker to do so?
Edit: md4 is not a typo. They use md4 not md5... OK.
- count 16y agoAnd that's not the only place they're stored (assuming the default cached credentials setting is still in place). Also, with the advent of pass-the-hash, you don't need to crack Windows AD passwords to use them anymore. Just having the hash is enough for loads of fun.
- Waywocket 16y agoWorse, Windows up to Server 2003 by default stores LAN Manager hashes as well. To describe the cracking of these as 'trivial' would trivialise the work 'trivial'.