Search Results
|
Post |
Author |
Forum |
Replies |
Views
[asc]
|
Posted |
|
|
Thread: Reversing MSCHAPv2 to NTLM
Post: RE: Reversing MSCHAPv2 to NTLM
Lets break this down:
johndoe::test-domain:1FA1B9C4ED8E570200000000000000000000000000000000:1B91B89CC1A7417DF9CFAC47CCDED2B77D01513435B36DCA:1122334455667788
https://davenport.sourceforge.net/ntlm.ht... |
|
evilmog |
User Contributions
|
18 |
36,629 |
10-01-2016, 09:19 PM |
|
|
Thread: Reversing MSCHAPv2 to NTLM
Post: RE: Reversing MSCHAPv2 to NTLM
I screwed up in my post:
Step 9) EvilMog writes a script to use atoms script to generate a raw NTLM hash for use in PTH
#!/bin/bash
challenge=$(echo -n "$1" | base64 -d | xxd | head -n1 | cut... |
|
evilmog |
User Contributions
|
18 |
36,629 |
11-03-2016, 11:24 PM |
|
|
Thread: Reversing MSCHAPv2 to NTLM
Post: Reversing MSCHAPv2 to NTLM
So as we all know mode 14000 generic DES can be used for evil, particularly for MSCHAPv2, I spoke at DerbyCon and here's the writeup I promised. This demo used $99 format which is MSCHAPv2 and can ... |
|
evilmog |
User Contributions
|
18 |
36,629 |
10-01-2016, 03:46 AM |
|
|
Thread: Reversing MSCHAPv2 to NTLM
Post: RE: Reversing MSCHAPv2 to NTLM
And the first release of the NTLMv1 multi tool is out
https://github.com/evilmog/ntlmv1-multi |
|
evilmog |
User Contributions
|
18 |
36,629 |
04-30-2018, 08:07 PM |
|
|
Thread: Reversing MSCHAPv2 to NTLM
Post: RE: Reversing MSCHAPv2 to NTLM
Sorry for reviving an old thread but I felt compelled to publish a few corrections as my original post wasn't exactly clear.
For NTLMv1-ESS, the plaintext password for the below hash is 'hashcat' a... |
|
evilmog |
User Contributions
|
18 |
36,629 |
04-25-2018, 01:10 AM |
|
|
Thread: Ubuntu 16.04 LTS NVIDIA Setup Guide
Post: Ubuntu 16.04 LTS NVIDIA Setup Guide
Ok here is my setup guide, I could be completely wrong on a few things so please update me, this will get turned into a wiki but I want discussion first:
1) Install Ubuntu 16.04 LTS
2) dpkg --remove... |
|
evilmog |
User Contributions
|
21 |
33,836 |
11-21-2016, 08:29 PM |
|
|
Thread: Ubuntu 16.04 LTS NVIDIA Setup Guide
Post: RE: Ubuntu 16.04 LTS NVIDIA Setup Guide
atom Wrote: (11-21-2016, 09:06 PM)
--
Some comments:
[*]You don't need to blacklist nouveau manually, the nvidia driver does that automatically while installing it
--
I had issues with server not ... |
|
evilmog |
User Contributions
|
21 |
33,836 |
11-21-2016, 10:12 PM |
|
|
Thread: Ubuntu 16.04 LTS NVIDIA Setup Guide
Post: RE: Ubuntu 16.04 LTS NVIDIA Setup Guide
happened on a net new virgin build this weekend |
|
evilmog |
User Contributions
|
21 |
33,836 |
11-21-2016, 11:24 PM |
|
|
Thread: Ubuntu 16.04 LTS NVIDIA Setup Guide
Post: RE: Ubuntu 16.04 LTS NVIDIA Setup Guide
1) Install Ubuntu 16.04 LTS
2) dpkg --remove-architecture i386
3) ldconfig && sync && reboot
4) apt-get install build-essential xserver-xorg p7zip xorg-dev libgtk-3-dev xdm
[there will be more p... |
|
evilmog |
User Contributions
|
21 |
33,836 |
11-21-2016, 10:24 PM |
|
|
Thread: Do not try to write --keyspace yourself
Post: RE: Do not try to write --keyspace yourself
royce Wrote: (11-24-2017, 11:00 AM)
--
*lightbulb*
Ahhhh ... so they only need to be "proportional" within specific attack type/combos, and that's why they can't be compared across them! Because i... |
|
evilmog |
hashcat
|
15 |
20,275 |
11-25-2017, 09:10 PM |
|
|
Thread: why do you think that multiple 5970 fry motherboards?
Post: RE: why do you think that multiple 5970 fry mother...
epixoip Wrote: (06-26-2017, 06:49 PM)
--
This isn't new. I've been screaming this for years and very few people have listened. Back in January I was warning that Vega is electrically a much higher wa... |
|
evilmog |
Hardware
|
7 |
7,497 |
06-27-2017, 07:52 PM |
|
|
Thread: NetNTLMv1 Help!
Post: RE: NetNTLMv1 Help!
I will be redoing my post with up to date python and bash to automate all the components, if you can wait until monday it should be up by then. Sorry for any of the confusion, the final crack part wa... |
|
evilmog |
hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip
|
5 |
7,281 |
04-21-2017, 08:41 PM |
|
|
Thread: NetNTLMv1 Help!
Post: RE: NetNTLMv1 Help!
magnum Wrote: (04-24-2017, 09:43 PM)
--
Perhaps these procedures should be added to the wiki as well?
--
Agreed, I got delayed with my day job but a half written python prototype is up to automate... |
|
evilmog |
hashcat-utils, maskprocessor, statsprocessor, md5stress, wikistrip
|
5 |
7,281 |
04-25-2017, 12:35 PM |
|
|
Thread: Skip & Limit Calculator
Post: Skip & Limit Calculator
If you are like me and hate middleware I've developed a script, because I'm bloody lazy, I've made the default the DES keyspace but you can make it whatever you want. To use the script modify the ... |
|
evilmog |
User Contributions
|
3 |
6,926 |
09-09-2016, 12:37 AM |
|
|
Thread: What is the storage requirement for OS to run hashcat?
Post: RE: What is the storage requirement for OS to run ...
mamexp Wrote: (02-11-2016, 07:26 AM)
--
I'm looking to test a rig with 4-6 GPUs and i'm wondering if i can use USB persistent Linux build as OS.
Does Hashcat use alot of IOs from the local OS?
... |
|
evilmog |
Hardware
|
4 |
5,700 |
11-27-2017, 04:40 PM |
|
|
Thread: LM Hashes
Post: RE: LM Hashes
Assuming your ntds dump is ntds.dit you need to do the following (don't do it from a mac, it just doesn't work)
1) Create a list of just lanman
Code:
--
cut -d: -f3 < ntds.dit | sort -u > ntds.lm... |
|
evilmog |
General Talk
|
11 |
5,692 |
08-28-2019, 10:40 PM |
|
|
Thread: Hashes from hostapd-wpe - MSCHAPv2 - Challenge and Response
Post: RE: Hashes from hostapd-wpe - MSCHAPv2 - Challenge...
echo 'marcelo:$NETNTLM$a1xxxxb56axxxxcb$aa324xxxx0ce25d97xxxx1d96af58014exxxxf016fxxxx8f' | perl -ne '/(.*?):\$.*?\$(.*?)\$(.*)/; print "$1::::$3:$2\n";'
marcelo::::aa324xxxx0ce25d97xxxx1d96af58014e... |
|
evilmog |
hashcat
|
3 |
5,387 |
11-23-2017, 02:08 AM |
|
|
Thread: Hashes from hostapd-wpe - MSCHAPv2 - Challenge and Response
Post: RE: Hashes from hostapd-wpe - MSCHAPv2 - Challenge...
alexpache Wrote: (11-23-2017, 02:24 AM)
--
Thank you so much. Worked fine.
edit by philsmd:
stop posting hashes. It is against the forum rules. do not use 2 accounts to post
--
Only reason I re... |
|
evilmog |
hashcat
|
3 |
5,387 |
11-24-2017, 12:28 AM |
|
|
Thread: Hashcat two separators - Other Questions
Post: RE: Hashcat two separators - Other Questions
tiren1337 Wrote: (06-29-2016, 09:52 PM)
--
Hello,
Is there any way to import UserID:Email:Hash in hashcat without removing user id? Because that file is huge it will take time... Also would it go ... |
|
evilmog |
General Talk
|
3 |
4,694 |
11-24-2017, 12:39 AM |
|
|
Thread: Epixoip was right
Post: RE: Epixoip was right
I even did a full talk on this after taking epixoip's advice, confessions of a crypto cluster operator was just a sweary rant against AMD. Moral of the story listen to him, even if he does forget to ... |
|
evilmog |
General Talk
|
3 |
3,922 |
03-27-2017, 06:03 AM |