securinets-ctf-2015-forensics-forensics2

Category: Forensics  
Points: 50
Hint : admin's account (Compte de admin)
url : http://41.231.22.133:8080/2/forensics.rar

 Unrar  the file forensics.rar

 

checking file format using file command 

 02 registry files SAM and SYSTEM  , lets try to dump SAM contents using pwdump7

 NTLM hash for user admin is  :DFAC230E99C5E6BB79E25668712D66B9

uisng online NTLM hash  :

the hash DFAC230E99C5E6BB79E25668712D66B9 is for clear text hahaha

Falg is : hahaha