Anatomy of NTLMv1/NTLMv1-SSP
Date: August 7 2018
Publication: BSidesLV 2018
Source: Currently no known Internet copy of paper.
Abstract or Summary:
There has been some confusion about NTLMv1 and NTLMv1-SSP reversing to NTLM hashes using hashcats mode 14000. This was largely due to a talk at Derbycon that had some incomplete information combined with a few forum posts on hashcat.net.
In order to simplify the process as much as possible a tool called the NTLMv1 multi tool was created to automate most of the steps in converting an NTLMv1 and NTLMv1-SSP hash into a hashcat challenge file.
PasswordResearch.com Note: Video of presentation: https://www.youtube.com/watch?v=qwTTaUkKH5w
Do you have additional information to contribute regarding this research paper? If so, please email firstname.lastname@example.org with the details.