
Q: What's this?
A: It's a patch to Solar Designer's "john the ripper" password cracker.

Q: What's it good for, then?
A: It enables john to crack Windows NT/2000 MD4 password hashes.

Q: Who made this?
A: This patch was thrown together on a boring Sunday by olle@defcom.com,
   it uses Andrew Tridgells NTLM and MD4 code stolen from samba-2.0.7 .

Q: How do I install it?
A: I assume you are able to install john from a source distribution,
   if you are not, read john's documentation. Put the files enclosed
   in this archive in the "src" subdirectory, run 'patch < john-ntlm.diff'
   and then 'make SYSTEM' ....

Q: How do I use john to crack NT password hashes?
A: Use pwdump2 or L0phtcrack to dump the password hashes into a file,
   then run 'john pwfile -format:NTLM' to start cracking!

Q: I have a question not covered by this FAQ!
A: Make sure you have read all there is to read about john, then
   mail me at <olle@defcom.com> with "JOHN-NTLM" in the subject.

