NTLM | KC's Blog https://www.kjctech.net Tue, 24 Jan 2023 18:20:56 +0000 en-US hourly 1 https://i0.wp.com/www.kjctech.net/wp-content/uploads/2016/12/cropped-KC-Logo.png?fit=32%2C32&ssl=1 NTLM | KC's Blog https://www.kjctech.net 32 32 24634607 Checking Pwned Passwords against Active Directory’s NTLM Hashes https://www.kjctech.net/checking-pwned-passwords-against-active-directorys-ntlm-hashes/?utm_source=rss&utm_medium=rss&utm_campaign=checking-pwned-passwords-against-active-directorys-ntlm-hashes https://www.kjctech.net/checking-pwned-passwords-against-active-directorys-ntlm-hashes/#comments Wed, 29 Aug 2018 19:00:34 +0000 https://www.kjctech.net/?p=4192 Pwned Passwords is a great web service that lets you check your own password against millions of compromised and leaked password. It’s not only getting constantly updated by the owner, Troy Hunt but offers text-based downloadable files and API for anyone interested in building a 3rd party app. Newly added to the list is the password hashes in NTLM format, […]

The post Checking Pwned Passwords against Active Directory’s NTLM Hashes first appeared on KC's Blog.]]> Pwned Passwords is a great web service that lets you check your own password against millions of compromised and leaked password. It’s not only getting constantly updated by the owner, Troy Hunt but offers text-based downloadable files and API for anyone interested in building a 3rd party app.

Newly added to the list is the password hashes in NTLM format, which can be used to compare to the hashes in any AD environment. That’s a wonderful news to those mostly working in a Windows environment, myself included.

Here are the steps how this can be done. I personally haven’t got chance to test it myself but sure will in the near future.

  1. Download the entire 517M NTLM passwords either as a torrent or courtesy of Cloudflare aggressively caching them.
  2. Export AD hashes either using PowerShell or the built-in ntdsutil command line.
  3. Check out the Match-ADHashes PowerShell script on GitHub or the Compromise Checker by Semrau Security.
The post Checking Pwned Passwords against Active Directory’s NTLM Hashes first appeared on KC's Blog.]]> https://www.kjctech.net/checking-pwned-passwords-against-active-directorys-ntlm-hashes/feed/ 3 4192