01-18-2019, 11:42 PM
(01-18-2019, 10:19 PM)metalg Wrote: Hi,
I'm having trouble "cracking" my own cachedump with domain creds.
I got this back;
user:$DCC2$#user#7eb833ab3bddade058de4bc672debdde:fulldomainj: shortdomain (added a space because of emoji.. ) Also not sure what that j is doing there but the cachedump, dumped it like that.
I tried with hashcat;
hashcat -m 2100 -a 0 hash wordlist --force
hashcat (v3.5.0) starting...
Hashfile 'hash' on line 1 (user:$DCC2$#user#7eb833ab3bddade058de4bc672debdde:fulldomainjhorttdomain): Line-length exception
Parsing Hashes: 0/1 (0.00%)...No hashes loaded.
Also tried John;
john hashfile --w=wordlist --format=mscash2
Using default input encoding: UTF-8
Loaded 1 password hash (mscash2, MS Cache Hash 2 (DCC2) [PBKDF2-SHA1 128/128 SSE2 4x2])
....
....
Completed not cracked.
Any idea's?
edited the hash for hashcat too:
$DCC2$#user#7eb833ab3bddade058de4bc672debdde
which seems to load, but now I'm stuck at
/usr/share/hashcat/OpenCL/m02100.cl: No such file or directory