search

csababarta / ntdsxtract

Active Directory forensic framework
http://www.ntdsxtract.com
GNU General Public License v3.0
311 stars 109 forks source link

Enhancement, add oclHashcat format to --pwdformat #1

Closed powderspecial600 closed 9 years ago

powderspecial600 commented 9 years ago

This can be the same as the john format only strip off the SID and the $NT$ at the beginning of the hash.

So it will look like this in the ntoutfile, as an example, test:0cb6948805f797bf2a82807973b89537 Same can go for the lmoutfile as well, I believe that is in the correct format today, but just needs the SID stuff stripped off the end.

csababarta commented 9 years ago

Thanks for the idea. It's included in version 1.3.2.

powderspecial600 commented 9 years ago

Thanks for the hard work!