admin/tijldeneut-diana
1
0
Fork 0
mirror of https://github.com/tijldeneut/diana synced 2026-06-08 17:48:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add files via upload

Browse Source 
New banner detailing the hash type
This commit is contained in:
Tijl Deneut
2025-06-24 11:29:22 +02:00
committed by GitHub
parent 4045dfa535
commit 684c32f6cc
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
diana-credhistdec.py
+5 -4
View File
@@ -38,11 +38,11 @@ if __name__ == '__main__':
'usage: %prog [options] CREDHIST\n\n'
'It tries to decrypt a user CREDHIST file.\n'
'AppData\\Roaming\\Microsoft\\Protect\\CREDHIST\n'
'Needs either the current user SHA1 hash or cleartext password.')
'Needs either the current user SHA1 UTF16LE hash or cleartext password.')
parser = optparse.OptionParser(usage=usage)
parser.add_option('--password', metavar='PASSWORD', dest='password')
parser.add_option('--pwdhash', metavar='HASH', dest='pwdhash')
parser.add_option('--password', '-p', metavar='PASSWORD', dest='password')
parser.add_option('--pwdhash', '-a', metavar='HASH', dest='pwdhash')
(options, args) = parser.parse_args()
@@ -53,5 +53,6 @@ if __name__ == '__main__':
if options.pwdhash: cred.decryptWithHash(bytes.fromhex(options.pwdhash))
elif options.password: cred.decryptWithPassword(options.password)
for s in cred.entries_list:
if s.ntlm: print('[+] CREDHIST decrypted')
if s.ntlm:
print('[+] CREDHIST decrypted')
print(cred)