// notes/ Active Directory
🏛️
Post Domain Compromise Sam Cleanup
Bash one-liner to just output NTLM Hashes
#active directory#adot8
source · oscp.adot8.com · active-directory/post-domain-compromise_sam-cleanup ↗SAM Cleanup
Bash one-liner to just output NTLM Hashes
bash
$cat hashes.txt | grep ::: | awk -F: '{print $1":"$4}'bash
$hashcat --user -m 1000 hashes.txt ~/rockyou.txt -O -r /usr/share/hashcat/rules/InsidePro-PasswordsPro.rule