search

gat3way / hashkill

hashkill password recovery tool
www.gat3way.eu/hashkill
Other
196 stars 47 forks source link

Buffer overflow using markovdict rule against NTLM hashes #50

Open peterclemenko opened 11 years ago

peterclemenko commented 11 years ago

Running hashkill against a series of NTLM hashes returns a buffer overflow when using the markovdict rule. The console log is at: https://gist.github.com/th3flyboy/aaf1a8ece0370c62f0c4

gat3way commented 11 years ago

This should be fixed with the latest commit I hope. Could you retry with the latest code from github?

peterclemenko commented 11 years ago

Just tested and it's still doing it.

gat3way commented 11 years ago

Hmmm...bad. I cannot reproduce it unfortunately. Could you run it through valgrind until it crashes then send me the output? It should be like this:

valgrind hashkill ..... 2> output.txt

Then send me output.txt

Thanks in advance.

r3mbr4ndt commented 11 years ago

Well I try to sign up with coverty, I hope they might point out those issues more clearly.

EDIT: Where told I aint the project owner. I hope they still accapt it. It would be benefitial :( EDIT2: Got approved! Gonna tell Harrold about it. So we should be able to pin down this Bug. :)