Frequently Asked Questions
Ophcrack
#01 I selected another table set in the list, but I still get the same results.
You should first select the directory in which the tables are installed on your computer and then the selected table type in the box will be automatically updated depending on the table type you chosed. Only SSTIC04-10k and SSTIC04-5k are available for free. More on this
here.
#02 I get ERROR: Windows SYSTEM file not found message.
You're trying to load hashes from encrypted SAM recovered from a Windows partition, but ophcrack does not find SYSTEM and SAM files needed for this operation. Be sure to select a directory containing both files. If it's still don't work, you can try to
manually retrieve hashes with bkhive/samdump2 and then load this file as a PWDUMP file.
#03 All my LMhashes are empty.
There are two explanations. First, all the passwords are longer than 14 characters and thus their LMhash is empty. It's more probable that LMhash
has been disabled on this machine. You should try to break these hashes with
NThash tables.
#04 I get Error: no valid hash was found in this file
The file you tried to open doesn't contain any valid hashes or is not formatted correctly for ophcrack. It should comply to one of these formats:
<lmhash / 16 bytes>
<lmhash / 16 bytes>:<nthash / 16 bytes>
user:id:<lmhash / 16 bytes>:<nthash / 16 bytes>:::
#05 Can I use rainbowcrack tables with ophcrack?
No, these tables are neither optimized nor fast. We will not add any support for such tables in the future.
#06 Do I need both SSTIC04-10k and SSTIC04-5k sets to cover a higher percentage of passwords?
Both SSTIC04-10k and SSTIC04-5k cover 99.9% of alphanumeric passwords. They have approximatively half of the passwords that are exactly the same (5000 first columns of 15'400'000 perfect chains) and the others are randomly selected. Therefore, using one after the other should improve the overall percentage of passwords covered. But you will remain between 99.9% and 100%.
#07 How can I compute my own tables for ophcrack?
We do not provide any tool for computing your own tables. You can find everything you need to do this in the source code.
#08 What are the LM accents and how are they supported?
Some accents are plainly ignored by the LM hash algorithm, but never
by the NT hash algorithm. When we finish cracking a LM hash we then
try all possible accents until we find the password that matches the
NT hash. With ophcrack 2.4 the following accents are supported:
È Ê Ë è ê ë Ù Ú Û ù ú û À Á Â Ã à á â ã Ò Ó Ô Õ
ò ó ô õ Ì Í Î Ï ì í î ï
If there are too many combinations (e.g your password is made
of 14 o's) ophcrack 2.4 may reduce the set of accents it tries.
#09 Does ophcrack installer contains viruses?
Ophcrack installer includes
pwdump6 from Fizzgig. This tool is often detected as malware by antivirus softwares (usually samdump.dll and pwservice.exe). These files are not infected, but categorized as
evil software. If you do not feel safe installing ophcrack, you will find online source code for every tool it includes as well as the main program.
Ophcrack LiveCD
#10 I downloaded the ISO file. What should I do next?
You can find many
tutorials on the Internet that explains how to burn an ISO file on a CD. Google is your friend.
#11 I burned the ISO file, but it does not boot ophcrack when I reboot my machine.
#12 After the CD boots, all seems to go well until I get a black screen.
Your graphic card is probably not well detected by the LiveCD. You should selecting another entry in the boot menu. If it still does't work, select the text version entry and change /etc/xorg.conf to make it match your graphic card. Then "startx".
#13 LiveCD hangs during boot.
There is a problem with your hardware detection. Try pressing the Tab key when you see the boot menu and adding "nopcmcia" or "nohotplug" at the end of line. You will find more information
there.
#14 I still does not succeed to boot from the ophcrack LiveCD
Have a look on
Slax forum since ophcrack LiveCD is based on Slax.
#15 I reach the graphical interface, but ophcrack does not start automatically.
On some machines, ophcrack does not start automatically when the graphical interface is started. Click on the right button and select xterm. Enter "cd /root" and then "./launch.sh". If it still does not work, enter "ophcrack" and use it
manually.
#16 Where are the tables located on the LiveCD?
You'll find them in /mnt/live/mnt/hdX/ophcrack/tables where X corresponds to a,b,c,... depending on the system.
#17 Can I change the tables stored on the LiveCD
Yes. You can simply put whatever tables you want in the ophcrack/tables directory of the LiveCD. You can either change them in the ISO file before burning it or on the USB stick if you install ophcrack LiveCD on it.
#18 How can I install ophcrack LiveCD on a USB stick?
It is really easy to make your USB stick bootable and run ophcrack LiveCD from it. Moreover, it's much faster to boot from USB than CD.
1. Download the latest ophcrack LiveCD iso.
2. Uncompress the iso file on an empty USB stick using a utility like 7-zip on Windows or by
mounting it on a loop device and copying the files on Linux.
3. Execute bootinst.bat on Windows or bootinst.sh on Linux in the boot folder of the USB stick to make it bootable.
You're done.