|
I want to do password length audit of domain password using offline brute force analysis. I cannot find any domain hashes from local machines , I want an approach where i can retrieve these hashes either though AD database file or by running some hashing retrieval tool. Can someone please guide me how could this be done? I'm using l0phtcrack as password auditing tool. Thanks |
|||
|
|
As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.
|
It's explained in the l0phtcrack documentation. http://www.l0phtcrack.com/help/using.html#obtaining_hashes Your options for obtaining the hashes are:
So, assuming you have sufficient privileges, you should be able to grab the hashes directly from the l0phtcrack application. |
||||
|
|
