Other Parts in Series: In my first guide in this series, I showed you how to capture NTLMv2 hashes by utilizing a tool called Responder.py. You can find that here. In this guide, I will show you how to crack those hashes using a tool called Hashcat. Hashcat works best when you run it locally … Continue reading Abusing LLMNR/NBT-NS in Active Directory Domains: Part 2 (Cracking NTLMv2 Hashes w/ Hashcat)