search

ly4k / PassTheChallenge

Recovering NTLM hashes from Credential Guard
MIT License
326 stars 21 forks source link

NTLM exchange to hashcat #1

Open CarrotCultivator opened 1 year ago

CarrotCultivator commented 1 year ago

Hello. Is it possible from the whole exchange, to generate a hash that can be fed into a password cracking utility like hashcat?

CarrotCultivator commented 1 year ago

( I am talking about the NTLMv2 exchange, not the NTLMv1 ). If it can be done, wouldn't it be also possible to create a dummy server that performs such an exchange automatically and extracts the resulting hash (like Responder does)? It may not be suitable for PtH, but a hash is a hash and it might be crackable.