So I wrote a handy script to convert NetNTLMv1 to $99 format and prepare hashes.txt for you, it doesn't call hashcat directly so you will have to crack pt3 on your own but its 1 minute at most and I spit out a mode 14000 hash format for you.
Step 1) download 99.txt and rename to 99.sh
Step 2) obtain a NetNTLMv1 hash legally, hashcat has example hashes, here I'm using u4-netntlm::kNS:338d08f8e26de93300000000000000000000000000000000:9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c
Step 3) run ./99.sh with the hash as the arugment like this
evilmog@hashtest:~$ ./99.sh u4-netntlm::kNS:338d08f8e26de93300000000000000000000000000000000:9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c
CT1: 9526fb8c23a90751
CT2: cdd619b6cea56474
CT3: 2e1e4bf33006ba41
CHALLENGE: cb8086049ec4736c
evilmog@hashtest:~$
Step 4) root@hashtest:~/hashcat# ./hashcat -m 14000 ../challenge.txt -o ../cracked-pt3.txt -a 3 -1 charsets/DES_full.charset --hex-charset ?1?1
Step 4) cat cracked-pt3.txt to obtain pt3
Step 5) run ./99.sh with the hash as the first argument and pt3 as the second argument like this
./99.sh u4-netntlm::kNS:338d08f8e26de93300000000000000000000000000000000:9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c [insert pt3]
lSb7jCOpB1EAAAHN1hm2zg==
Step 6) The output of 99.sh is the $99 format hash. The script woudl have output a pt3.txt and a hashes.txt, follow my skip and limit calculator post to spread the work across the nodes and use hashes.txt in mode 14000
Step 7) profit
99.txt (Size: 1.93 KB / Downloads: 0)
limit.txt (Size: 921 bytes / Downloads: 0)
Step 1) download 99.txt and rename to 99.sh
Step 2) obtain a NetNTLMv1 hash legally, hashcat has example hashes, here I'm using u4-netntlm::kNS:338d08f8e26de93300000000000000000000000000000000:9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c
Step 3) run ./99.sh with the hash as the arugment like this
evilmog@hashtest:~$ ./99.sh u4-netntlm::kNS:338d08f8e26de93300000000000000000000000000000000:9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c
CT1: 9526fb8c23a90751
CT2: cdd619b6cea56474
CT3: 2e1e4bf33006ba41
CHALLENGE: cb8086049ec4736c
evilmog@hashtest:~$
Step 4) root@hashtest:~/hashcat# ./hashcat -m 14000 ../challenge.txt -o ../cracked-pt3.txt -a 3 -1 charsets/DES_full.charset --hex-charset ?1?1
Step 4) cat cracked-pt3.txt to obtain pt3
Step 5) run ./99.sh with the hash as the first argument and pt3 as the second argument like this
./99.sh u4-netntlm::kNS:338d08f8e26de93300000000000000000000000000000000:9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c [insert pt3]
lSb7jCOpB1EAAAHN1hm2zg==
Step 6) The output of 99.sh is the $99 format hash. The script woudl have output a pt3.txt and a hashes.txt, follow my skip and limit calculator post to spread the work across the nodes and use hashes.txt in mode 14000
Step 7) profit

