The Domain Password Audit Tool
summary
Domain Password Audit Tool automates converting an exported NTDS.dit with secretsdump into user records, feeds hashes to crackers like hashcat or John the Ripper, and post-processes cracked LM outputs to reconstruct NTLMs and produce CSV/HTML reports. Shows password lengths, reuse, and up to 24-entry password history, flags lingering LM hashes (still found in many environments), and recommends 15+ character passwords. Claims: 14‑char NTLMs are effectively uncrackable (4.3 billion years on a consumer rig) while LM halves are trivially brute‑forcible; tool is open source in the repo and produces usable breach-risk reports.
AI-written summary · about
chapters (7)
- 0:00Intro
- 8:59Cameron Roberts
- 13:12Domain Controller
- 14:35Darin Roberts
- 19:23Cracking
- 21:20Running the file
- 26:02PasswordLang Statistics
related talks
28mSo You Cracked a Bunch of Passwords. Now What?
24mAn investigation of the effectiveness and security of pwds
58mHacking in 2016 - How is our systems broken?
31mBreaking Bad (Passwords)
27mNTLMv1 reversion to NTLM with hashcat and the NTLMv1-multi tool
01h 02mCQTools: The New Ultimate Hacking Toolkit
40mLive autopsy of a password: lessons learnt cracking secrets
53mThe Importance of Identity-Centric Security in 2024