Hashcat results to user:pass

resolvehash.sh

#!/bin/bash

# A, maybe-I-cant-read-docs script to resolve cracked NTLM
# hashes back to username.

# usage - ./resolvehash.sh hashdump cracked
while read LINE
do
	# set the hash and password
	HASH=$(echo "$LINE" | cut -d: -f1)
	PASS=$(echo "$LINE" | cut -d: -f2)

	USER=$(grep $HASH $1 | cut -d: -f1)

	echo "$USER:$PASS"
done < $2