Skip to content

Latest commit

 

History

History
49 lines (37 loc) · 1.78 KB

README.md

File metadata and controls

49 lines (37 loc) · 1.78 KB
Raw

NTLMv1 To NTLM

This tool is a variant of EvilMogs ntlmv1-multi tool which was based on "forum posts by atom the author of hashcat and research by moxie marlinspike". Whereby it converts NTLMv1/NTLMv1-ESS hashes into its respective DES key parts to be cracked.

Copyright: Jack Moran

Credit:

  1. EvilMog (Team Hashcat)
  2. Atom (Team Hashcat)
  3. Hashcat

Requirements:

  1. Python 3.12.2
  2. ct3_to_ntlm.bin

Example:

// Step 0 - Test Hashes:
NTLMv1: itz_d0dgy::D0DGY-1234567:76365E2D142B5612980C67D057EB9EFEEE5EF6EB6FF6E04D:727B4E35F947129EA52B9CDEDAE86934BB23EF89F50FC595:1122334455667788

NTLMv1-ESS: itz_d0dgy::D0DGY-1234567:85D5BC2CE95161CD00000000000000000000000000000000:892F905962F76D323837F613F88DE27C2BBD6C9ABCD021D0:1122334455667788

// Step 1 - Convert NTLMv1 to DES Keys (Using NTLMv1 as example)
python ntlmv1_to_ntlm.py \
    --get_des_keys \
    --hashcat \
    --ntlmv1 itz_d0dgy::D0DGY-1234567:76365E2D142B5612980C67D057EB9EFEEE5EF6EB6FF6E04D:727B4E35F947129EA52B9CDEDAE86934BB23EF89F50FC595:1122334455667788

This will produce a hash file with the following output for cracking:
    727B4E35F947129E:1122334455667788
    A52B9CDEDAE86934:1122334455667788

    or if you used the NtLMv1-ESS:

    892F905962F76D32:B36D2B9A8607EA77
    3837F613F88DE27C:B36D2B9A8607EA77

// Step 2 - Convert DES Keys to NTLM
python ntlmv1_to_ntlm.py \
    --get_ntlm \
    --cracked_des_key_1 8923BDFDAF753F63 \
    --cracked_des_key_2 17D741D7DDC1C36F \
    --ntlm_challenge_type_3 BB23EF89F50FC595 \
    --ntlm_challenge 1122334455667788

This will produce the following output:
    8846f7eaee8fb117ad06bdd830b7586c