This slide tells how the windows stores passwords and how one can use it to crack passwords, how one can use rainbow tables.

1. RAINBOW TABLES LM & NTLM HASHES By:- Rahul Sharma TE COMPUTERS T3224245

3. Old technology used on LAN Manager

4. NT hashes

5. Unicode password or MD4 hash

7. LM “Hash” Generation

8. how to create the hash

9. LM hashes

10. Overview

11. Proof that case doesn’t matter Password = E52CAC67419A9A22 4A3B108F3FA6CB6D PaSSwORd = E52CAC67419A9A22 4A3B108F3FA6CB6D Password1 = E52CAC67419A9A22 38F10713B629B565

12. NTLM HASHES Uses MD4 algorithm to create a hash of the mixed-case password Results in a 16 byte hash of the password (stored in the SAM…) Used for any password greater than 14 characters

13. NTLM HASH

14. Proof that case DOES matter Password = F15ABD57801840F3 348DDCCAFB677F6A PaSSwORd = 17504CE07C0A0D4A 1BD3A99A0821F957 Password1 = F9A3152D926F9FF8 98D0BAFBA0BFFD30

15. NTLM Hash Considerations Case preserving Maximum length = 127 characters Better Security than LM Hashes Number of ≤14-character password (full char set) ≈ 2.7*1067 Number of 127-character passwords ≈ 4.9*10611

16. ATTACKS ON PASSWORDS….

23. Reduce Hash Hash Reduce Reduce

25. Algorithm followed:-

26. Hash Reduce Reduce Hash Reduce Hash Reduce Hash

28. IS THIS EFFECTIVE???

29. How to prevent rainbow tables from cracking passwords??

31. This makes it possible to speed up password cracking with precomputed Rainbow Tables

33. Linux Salts its Hashes

38. http://en.wikipedia.org/wiki/Rainbow_table

39. http://www.freerainbowtables.com/

40. http://kestas.kuliukas.com/RainbowTables/

41. http://project-rainbowcrack.com/