View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0009174Kali LinuxNew Tool Requestspublic2025-05-12 19:592025-05-29 19:17
Reporterohiorizz Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
Summary0009174: revealhashed - semi-automated python script to automatically match username-hash-password respectively by ntds
Description

[Name] - revealhashed
[Version] - 0.1.0
[Homepage] - https://github.com/crosscutsaw/revealhashed-python
[Package] - https://pypi.org/project/revealhashed/
[Author] - Aslan Emre Aslan
[License] - MIT
[Description] - revealhashed is a semi-automated python script to automatically match username-hash-password respectively.
[Dependencies] - impacket
[Similar tools] - https://github.com/crosscutsaw/revealhashed
[Activity] - today (12.05.2025)
[How to use] - instructions on homepage but:
revealhashed dump 'troupe.local/emreda:Aa123456'@192.168.2.11 -w wordlist1.txt wordlist2.txt -e
revealhashed reveal -ntds TROUPEDC_192.168.2.11_2025-05-12_123035.ntds -w wordlist1.txt -e

what actually revealhashed does?
-revealhashed dumps ntds, filters hashes, cracks them with hashcat, does some text operations to match hashes with corresponding users.
the output is so clean that pentester can add their report without hassle.

why it should be included in kali?
because revealhashed cuts time consuming steps.

how it has been tested?
tested in my own ad lab, also on many real world pentest projects.

Attached Files
rp1.PNG (130,219 bytes)   
rp1.PNG (130,219 bytes)   
rp2.PNG (59,516 bytes)   
rp2.PNG (59,516 bytes)   

Activities

ohiorizz

ohiorizz

2025-05-29 19:13

reporter   ~0020644

Last edited: 2025-05-29 19:17

hello,

i'm not happy how this issue looks since i did many changes. everyting is splitted so i want to sum them in one post.

###########################

[Name] - revealhashed
[Version] - 0.1.4
[Homepage] - https://github.com/crosscutsaw/revealhashed-python
[Package] - https://pypi.org/project/revealhashed/
[Author] - Aslan Emre Aslan
[License] - MIT
[Description] - revealhashed is a streamlined utility to correlate ntds usernames, nt hashes, and cracked passwords in one view while cutting out time-consuming manual tasks.
[Dependencies] - impacket, hashcat
[Similar tools] - https://github.com/crosscutsaw/revealhashed
[Activity] - today (12.05.2025)
[How to use] - https://github.com/crosscutsaw/revealhashed-python/blob/main/README.md >>> this readme explains everything

what actually revealhashed does?
-revealhashed has two modes; dump and reveal. dump command dumps ntds.dit from addc with ntdsutil, sorts unique hashes, executes hashcat to crack, correlates username-hash-password and finally gives a clean output. reveal command is same without dumping ntds.dit. it's for already owning an ntds dump.

why it should be included in kali?
-because revealhashed does time consuming steps automatically and safely. revealhashed also supports csv output. these outputs are easy to include in a pentest report. also, since output is so clean, pentester easily import cracked users to bloodhound with less hassle.

kali packaging
this repository contains everything related to kali packaging:
https://github.com/crosscutsaw/revealhashed-kali_packaging

i followed instaloader guide and successfully received packaged deb file. please tell me if something is wrong.

Issue History

Date Modified Username Field Change
2025-05-12 19:59 ohiorizz New Issue
2025-05-12 19:59 ohiorizz File Added: rp1.PNG
2025-05-12 19:59 ohiorizz File Added: rp2.PNG
2025-05-29 19:13 ohiorizz Note Added: 0020644
2025-05-29 19:17 ohiorizz Note Edited: 0020644