Hashcat and domain audit

I’m trying to audit our DC but hashcat is doing my head in as I just can’t seem to get it to scan the hashes I have. We went the route of GCHQ forcing a strong password that never changes. This is good and I’ve been slowly forcing each department to reset their passwords, however I decided to grab the AD files with the ntdsutil tool and used DSInternals powershell script to extract the hashes.

I’m then using my Windows machine with the good GPU in it and running the following

hashcat -a 0 -m 1000 -o cracked.txt hashs.txt wordlists.txt

But every time it comes back with “no hashes loaded”

I use

hashcat -a 0 -m 1000 -o cracked.txt hashs.txt wordlists.txt

I’ve put in –username to get it to ignore the usernames in the hash, made no different.

I decided remove all hashes and just leave one for testing. I removed the user name before it and did the original command I ran. Still keeps saying no hashes loaded.

Any ideas?

submitted by /u/steviefaux
[link] [comments]

August 3, 2023
Read More >>