Password Spraying

Jasiono

Hey everyone, I performed a password spray against a list of LM passwords, and I was wondering if there was a way to pair up both of the halves automatically to get the full password instead of searching for each half to combine them.

*NOTE*
I am not doing this illegally. I am performing my first password audit and have a full statement of work in place and signed by my employer.

UnixGuy

I think a tool called "Cain and Abel" can do that for you

Jasiono

Bananas. Not doing the trick. I'll have to dive deeper

636-555-3226

How are you password spraying against LM hashes? Do you mean you have an offline file with LM hashes in it? If so, take your pick (going off of memory here....)

hashcat (preferred, for me) - ./hashcat.bin -a 3 -m 3000 lm_hashes.txt -1 ?a ?1?1?1?1?1?1?1 --increment

jtr - john --format=LM lm_hashes.txt

Jasiono

Yeah it was an offline file.
I went in manually and did it. I will have to try what you mentioned