Practice ntds.dit File Part 9: Extracting Password History Hashes

Malware Analysis
1

I released a tool to analyze password history.

To extract password history from ntds.dit with ntdsxtract/dsusers.py, use option –passwordhistory.

To extract password history from ntds.dit with secretsdump.py, use option -history.

20170302-224914


Article Link: https://blog.didierstevens.com/2017/03/03/practice-ntds-dit-file-part-9-extracting-password-history-hashes/