impacket-secretdumps

# This will reveal the hash value of the user from sam database
sudo ~/impacket/examples/secretsdump.py -sam sam.hive -system system.hive LOCAL

OR

python3 /usr/share/doc/python3-impacket/examples/secretsdump.py -sam sam.save -security security.save -system system.save LOCAL

OR

impacket-secretdumps 

Here is the format for the hashes

Dumping local SAM hashes (uid:rid:lmhash:nthash)

Last updated