We uploaded a version of Ophcrack compiled for Windows 64-bit platforms. This version can preload tables using the whole RAM available instead of only 2GB on 32-bit platforms. Thanks to Andy Vandijck for its support!
Ophcrack 3.6.0 and the corresponding LiveCD including the new probabilistic tables have been released. Ophcrack preloading has been rewritten to fix issues found in the version 3.5.0. Support of the probabilistic tables was improved as well.
Ophcrack version 3.5.0 is ready to download. This version adds the support of the new probabilistic tables. These tables will be available soon and mix patterns and Markov to crack the most probable passwords.
We will give a talk at SSTIC 2013 to present these tables in depth.
We released the version 3.4.1 of ophcrack today. It adds the support of the Vista special XL tables and fixes some bugs with Vista eight XL tables on Windows.
A new LiveCD will follow soon hopefully. Stay tuned!
This new LiveCD includes the latest version of ophcrack 3.4.0.
It is built on Slitaz 4.0, the latest version of this great LiveCD. Christophe Lincoln from Slitaz helped us to enhance the scripts for partitions and tables detection. A new ncurses interface is also available to help users look for tables on other drives or interact with ophcrack.
Finally a LiveCD without tables has been released as well for users that already downloaded or bought tables. The directory containing the table files must be placed inside another directory called tables in order for ophcrack to find them automatically.
After almost three years without news, here comes the version 3.4.0 of ophcrack. This will probably be the final release in the 3.x branch.
It adds the support of the soon to be released XP flash and Vista eight XL tables. On Windows it also adds the support of dumping the hashes through samdump2 live using NTFS low-level access to the locked files.
A new LiveCD will follow soon hopefully. Stay tuned!
samdump2 is now able to dump hashes on live systems using low-level access to the file system. Only NTFS is currently supported. It will be integrated to the next version of ophcrack as well.
* Version 3.0
* Dump of hashes on live systems running on NTFS fs
through low-level fs access (admin rights required)
* Support of special characters in usernames
This is bugfix release. An issue with the vista_seven tables on 32 bits architecture has been fixed, as well as some stuff related to the audit mode and CSV output.
The LiveCD corrects two recurrent problems: the misdetection of the CD on machines having more than one CD drive and memory exhaustion on machines with less RAM (lowram mode).
Ophcrack version 3.3.0 includes support for our new tables vista_seven. These tables crack 99% of passwords of length 7 composed of almost any character including special characters. This table set will be included in our professional tables bundle.
New features have been added like the table size verification in order to warn the user if the tables have not been fully downloaded for example. It is also possible to tune how the preloading should be done.... read more
This is mostly a maintenance release, except the support for our new vista_num tables. These tables crack 99.9% numeric passwords of length 1 to 12.
The code has been fixed to support large files bigger than 2GB even on 32-bits architectures. This problem was important to fix since the new professional tables are quite large and were not very well handled by some systems.
Qt and Qwt have been upgraded and it seems to fix some stability issues of the GUI on win32.
Ophcrack 3.2.0 includes long awaited audit features. For example, it is now possible to enable audit mode. In this mode, users and passwords are no longer displayed and are replaced by cracking time and password characteristics in order to help you to perform the audit of your enterprise passwords.
It is also possible to export the audit results to a CSV file so that you can analyze the audit results in Microsoft Excel or OpenOffice Calc and generate your own plots.... read more
This new release brings some interesting features like the new vista_nine support and the possibility to hide the usernames when auditing the passwords strength. The bruteforce is also much faster than before.
There have been some fixes as well in order to make ophcrack more portable and improves its configure script. The supporting distribution for the LiveCD has not been upgraded since we are waiting for the next version of Slax to be released.
Ophcrack 3.0.1 includes some fixes to make it easier to compile on Mac OS X either on little endian or big endian platforms. It also includes a fix in the configure script for Qt version detection. No changes in the win32 version.
You will find the most interesting changes in the LiveCD. Lots of people seems to have problems with partitions not properly mounted or windows path detection. We hope that the new version will fix this problem for most of them.
After four months of hard work, the brand new version of ophcrack is finally available for download. Most of the code was completely rewritten. It includes many exciting new features:
Multithreading: Ophcrack's new architecture takes advantage of multi-core CPUs in order to speed up the cracking. The whole process is separated in tasks which can be run in parallel.
Bruteforce module: Before using the tables selected, ophcrack will now try to bruteforce the hashes for up to 4 characters (special characters included). You can therefore crack some passwords containing special characters even if you do no buy special tables.... read more
Ophcrack 2.4 has been released and is included in the new version of the LiveCD 1.4. This LiveCD is based on the latest version of Slax 6 RC5, which should support recent hardware.
Thanks to everyone! We hope you enjoy...
We released ophcrack LiveCD version 1.1.4 which integrates ophcrack 2.3.4. What's new? First, vista support, but the tables are not useful if LMhash is disabled on vista (by default). Maybe we will release a smaller set of NT tables in the future.
It is also much more easier to change the tables on the LiveCD. Just replace the tables in "ophcrack/tables" by whatever you want.
We will now maintain officially bkhive and samdump2 from Nicola Cuomo since he stops working on these tools. You'll find these files in our Download section.
A new version of ophcrack has been released. It includes new versions of bkhive and samdump2 which extract passwords from Vista, as well as support for german characters table set. It also runs on Vista (except pwdump6).
We released a new version of the LiveCD with the latest version of ophcrack 2.3.3 as well as bkhive2 which corrects some bugs of bkhive from Nicola Cuomo.
We noticed a few problems in bkhive from Nicola Cuomo and so we developed a new version which should be more stable. We also added a new feature in ophcrack: it saves automatically the last tables directory for the next time. Download it right now...
This version fixes a bug of bkhive in win32 version. A new pwdump6 version is also included and some bugs fixed. Enjoy!
This version is released to fix all the display problems.
There are now 3 choices:
A table set with 2^43 NTHashes is available from
This version fixes a bug related to the auto-detection of the tables.