NTLM Hashdump to hashcat/oclHashcat format converter

[jakelikescake123]

Hello everyone,

English class was quite boring today, so I decided to write a simple little script that I can actually use myself. Since *hashcat requires that you use either the NTLM hashes, or the username:hash with --username option, the script I made takes a hashdump (I used samdump2), and converts it to the username:hash format that *hashcat can use. I hope this is able to help someone besides myself (dumping a SAM hive with 50+ users, maybe?).

This script is quite simple, feel free to change it to fit your needs (I figured you would anyway). Written in Python3.

-Jake



CODE:

Code:

""" Written by Jake Hemmerle Script takes a samdump2-like output format and converts it to a *hashcat usable format. Hope this helps! """ import sys if len(sys.argv) != 2: print("Usage: ntlm2hc.py infile") print("") print("INFILE FORMAT") print("username:userID:LMhash:NTLMhash:*") sys.exit() infile = open(str(sys.argv[1])) for line in infile: string = line.split(':') print(string[0] + ":" + string[3]) infile.close() sys.exit()

[epixoip]

easier, no python requirement"

Code:

awk -F: '{print $1 ":" $4}' samdump2.txt

also, oclHashcat 1.20 will support pwdump format, etc.

http://pastebin.com/Wqn1QRFi

[jakelikescake123]

@epixiop

Thanks for the info! I didn't know about the support in oclHashcat 1.20. I figured that you could easily do it with bash, but I am going to learn python at some point, and so I figured I would make this for practice.

-Jake