10-28-2012, 12:37 AM
(10-28-2012, 12:14 AM)M@LIK Wrote: oclHashcat-plus's --show is too simple to do that.
Apparently, you're on Windows. So grab gawk (Google it) and run the following kinda-ugly one-liner:
Code:gawk -F: "FNR==NR{a[$2]=$1;next} $1 in a{print a[$1] FS $2}" email.hash.txt hash.pass.txt > email.pass.txt
Note: Pwds with ':' in them will not get extracted correctly.
Worked like a charm bro.
Thanks so much