v1.0.6: NTLM hash support #29
wneessen
announced in
Announcements
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
This release introduces support for NTLM hashes in the PwnedPassAPI as announced by Troy Hunt.
To be able to generate NTLM hashes, we needed the ability to calculate MD4 hashes, as NTLM basically is calculated like this:
MD4(UTF-16LE(pw))
. For this we ported the official golang.org/x/crypto/md4 package, so we can still claim that the module "only depends on Go stdlib".A new
Client
option has been introduced:WithPwnedNTLMHash
. If the client is initalized with this option, all generic methods (ListHashesPassword
andCheckPassword
) will operate on NTLM hashes.Additionally, there are now equivalent methods for checking passwords and listing hashes for NTLM:
CheckNTLM
andListHashesNTLM
What's Changed
Full Changelog: v1.0.5...v1.0.6
This discussion was created from the release v1.0.6: NTLM hash support.
Beta Was this translation helpful? Give feedback.
All reactions