|
Search Results
|
| Post |
Author |
Forum |
Replies
[asc]
|
Views |
Posted |
| |
|
Thread: Privilege Escalation Hash Type
Post: RE: Privilege Escalation Hash Type
| Here is one of the results from the registry pull.
HKEY_CURRENT_USER\Software\pdfforge\PDFCreator\Settings\ApplicationSettings\Accounts\TimeServerAccounts\0
Password REG_SZ xxxxxxmCO6g=
... |
|
slawson |
hashcat
|
7 |
2,031 |
11-08-2019, 03:51 PM |
| |
|
Thread: Privilege Escalation Hash Type
Post: RE: Privilege Escalation Hash Type
| Thanks for the info. I'll take a deeper look. |
|
slawson |
hashcat
|
7 |
2,031 |
11-08-2019, 07:17 PM |
| |
|
Thread: cracking a domain cachedump
Post: cracking a domain cachedump
| I obtained a Domain Cache dump via cachedump SYSTEM SECURITY. I ran oclhashcat on the hash using the hash type 1000 for NTLM. Oclhashcat picked up the hash, but didn't match any passwords. Since th... |
|
slawson |
Old oclHashcat Support
|
6 |
16,223 |
11-07-2014, 07:21 PM |
| |
|
Thread: cracking a domain cachedump
Post: RE: cracking a domain cachedump
| When I processed the file using hash type 1000 I used the --username parameter and Oclhashcat recognized the hashes that were in the file, but it didn't crack it. I ran the same scan using hash type ... |
|
slawson |
Old oclHashcat Support
|
6 |
16,223 |
11-07-2014, 11:52 PM |
| |
|
Thread: cracking a domain cachedump
Post: RE: cracking a domain cachedump
| I guess I didn't make my question clear enough. I will rephrase it. If I have a hash from a Domain Credentials cache dump, can I crack it by using either hash type 1000 or 1100? My testing shows th... |
|
slawson |
Old oclHashcat Support
|
6 |
16,223 |
11-08-2014, 04:44 AM |
| |
|
Thread: fgdump layout
Post: fgdump layout
| I am needing some clarity on what I am looking at in a fgdump file. My hash dump shows me the usernames and hashes that I can successfully load and crack, but usually at the bottom of my hash file it... |
|
slawson |
General Help
|
6 |
9,866 |
11-12-2014, 07:09 PM |
| |
|
Thread: fgdump layout
Post: RE: fgdump layout
| So the AD assigns the random password? What would these hashes be useful for as far as penetration testing goes? |
|
slawson |
General Help
|
6 |
9,866 |
11-12-2014, 07:51 PM |
| |
|
Thread: fgdump layout
Post: RE: fgdump layout
| Thanks for the info. I guess one last question on this is:
Is there any way to tell fgdump to ignore the machine accounts, so that they don't crowd up my hash file? |
|
slawson |
General Help
|
6 |
9,866 |
11-12-2014, 08:26 PM |
| |
|
Thread: fgdump layout
Post: RE: fgdump layout
| Great information. Thanks for not using demeaning sarcasm on a newbie. |
|
slawson |
General Help
|
6 |
9,866 |
11-12-2014, 10:23 PM |
| |
|
Thread: Hashing NTLM with frequencies
Post: Hashing NTLM with frequencies
| I just downloaded the huge dump of NTLM hashes, but the file has a colon and the number of frequencies at the end of each line.
Sorry for such a basic question, but what parameter do I use to ignor... |
|
slawson |
hashcat
|
6 |
1,854 |
08-15-2019, 11:39 PM |
| |
|
Thread: Hashing NTLM with frequencies
Post: RE: Hashing NTLM with frequencies
| Thanks for the quick reply. Do you know of a Windows command to truncate the lines of text? |
|
slawson |
hashcat
|
6 |
1,854 |
08-16-2019, 02:54 PM |
| |
|
Thread: Hashing NTLM with frequencies
Post: RE: Hashing NTLM with frequencies
| I just went ahead and copied the 20GB text file to Linux and used the following command:
cut -c -32 filename.txt > hashes.txt
Surprisingly it only took about 1 minute for Linux to process the fi... |
|
slawson |
hashcat
|
6 |
1,854 |
08-16-2019, 03:29 PM |
| |
|
Thread: Hashing NTLM with frequencies
Post: RE: Hashing NTLM with frequencies
| Just curious, what is the maximum number of hashes that can be loaded in one process? I'm getting an error CL_INVALID_BUFFER_SIZE. |
|
slawson |
hashcat
|
6 |
1,854 |
08-16-2019, 04:51 PM |
| |
|
Thread: Creating Custom Password List
Post: RE: Creating Custom Password List
| Never done that before, I'll see what I can find online. Thanks. |
|
slawson |
General Talk
|
6 |
2,554 |
10-23-2019, 11:18 PM |
| |
|
Thread: Creating Custom Password List
Post: RE: Creating Custom Password List
| Awesome. That's exactly what I was looking for. Thank you.
Since I have the MACs in a file this was my command:
for WLAN_MAC in $(cat macs.txt); do ETH_MAC=`printf '%x' $(( 0x$WLAN_MAC - 1 ))`... |
|
slawson |
General Talk
|
6 |
2,554 |
10-24-2019, 03:08 PM |
| |
|
Thread: Creating Custom Password List
Post: RE: Creating Custom Password List
| Thanks for the info. This little project worked wonderfully. |
|
slawson |
General Talk
|
6 |
2,554 |
10-25-2019, 04:03 PM |
| |
|
Thread: Creating Custom Password List
Post: Creating Custom Password List
| Hopefully it is ok to ask this question here, but here it is.
I am trying to create a custom password list. The routers I am testing have a default password that uses the last 10 of LAN MAC. It... |
|
slawson |
General Talk
|
6 |
2,554 |
10-23-2019, 10:48 PM |
| |
|
Thread: Running hashcat on multiple hash files
Post: Running hashcat on multiple hash files
| Is there a way to do this? I tried this:
hashcat -m 16800 --show *.16800
This actually runs, but it only shows results for the first file in the directory. |
|
slawson |
General Talk
|
5 |
2,999 |
10-23-2019, 06:04 PM |
| |
|
Thread: Running hashcat on multiple hash files
Post: RE: Running hashcat on multiple hash files
| I did the Windows equivalent
copy /b *.16800 all.16800
That works, but I guess I was just curious if hashcat can handle multiple files at once. |
|
slawson |
General Talk
|
5 |
2,999 |
10-23-2019, 09:40 PM |
| |
|
Thread: Cannot remove a hash
Post: Cannot remove a hash
| When I attempt to use the --remove parameter against a fgdump hash file, I get the message: Remove not supported in native hashfile-format mode.
Do I have to modify the file to only show Username:H... |
|
slawson |
Old oclHashcat Support
|
4 |
9,952 |
11-12-2014, 06:32 AM |
