AnTaL Posted April 26 Share Posted April 26 Hello, Anyone already used QuickCreds with BB or Responder and had only NTLMv1 hashes ? I tried on different computers win10, I have NTLMv2 hashes except for one of them. I'm trying to find out what are these hashes because it seems it's not related to my windows password. Thanks for your help ! Quote Link to comment Share on other sites More sharing options...
dark_pyrro Posted April 27 Share Posted April 27 You probably need to submit some samples, difficult to say without being able to see what they look like. Quote Link to comment Share on other sites More sharing options...
AnTaL Posted April 29 Author Share Posted April 29 Hello dark_pyrro, Thanks for your answer. That's right, it's better with an example, sorry. I was thinking more of a "theoretical" answer if someone had already had it so it didn't occur to me to put a hash. This is one of them, found in Proxy-Auth-NTLMv1-172.16.64.10.txt: MW-365289$::MW-365289:F51049F52D53F15A00000000000000000000000000000000:7B4FE17DB2FD43F32B6747C81C144A0A0F4F58CF50C10B4C:2f9cd2ac60741f31 MW-XXXX is my computer's name. My login name doesn't appear in it contrary to the NTLMv2 hashes wherein I have LOGIN::COMPUTERNAME:...... Thanks ! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.