Hi,
I was trying to extract Windows 10 hash from SYSTEM and SAM using Samdump2 but for some reason I'm not able to recover the known password.
I didn't use Kali Live during boot, I basically ran cmd in admin mode.
Transferred both files to shared Kali Linux folder for VM (/media/shared)
In Kali
Transferred winhash back to windows hashcat folder
On Hashcat
But no luck.
When I tried an NTLM generator online, the hash was different from winhash too...
Appreciate the help. Thanks
I was trying to extract Windows 10 hash from SYSTEM and SAM using Samdump2 but for some reason I'm not able to recover the known password.
I didn't use Kali Live during boot, I basically ran cmd in admin mode.
Code:
reg save hklm\sam c:\ samCode:
reg save hklm\system c:\systemIn Kali
Code:
samdump2 -o winhash /media/shared/system /media/shared/samOn Hashcat
Code:
hashcat64 -m 1000 winhash -a 3 ?a?a?a?a?a?a?a?aBut no luck.
When I tried an NTLM generator online, the hash was different from winhash too...
Appreciate the help. Thanks