Skip to content

Instantly share code, notes, and snippets.

@sopsmattw

sopsmattw/lsadump2hashcat.txt

Last active May 15, 2020 21:20
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sopsmattw/41a5c6ac3947745981ce8935bd05bb17 to your computer and use it in GitHub Desktop.
Save sopsmattw/41a5c6ac3947745981ce8935bd05bb17 to your computer and use it in GitHub Desktop.
Download ZIP
mimikatz parser to hashcat
Raw
lsadump2hashcat.txt
for parsing invoke-mimikatz dump from a DC via lsadump::lsa /inject
cat mimikatz_dump.txt | pcregrep -M 'User\s+:\s+[^\s]+\n\n.*Primary\n.*NTLM\s+:\s+[^\s]+\n' | sed "s/'/\\\'/" | xargs -L 3 echo | grep -v '\(null\)' |sed -e 's/User : //g;s/* Primary NTLM ://g'|grep -v -e '\$ ' -e 'IUSR'| awk '{print $1 ":" $2}' |sort -u
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment