From 64beb2f9b1a973df78bae5fe8939e94d3574575c Mon Sep 17 00:00:00 2001
From: bandrel <justin.bollinger@trustedsec.com>
Date: Tue, 29 Jan 2019 17:29:01 -0500
Subject: [PATCH] updated regex for pwdump format checks

---
 hate_crack.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hate_crack.py b/hate_crack.py
index 921b6ce..d51f3ba 100755
--- a/hate_crack.py
+++ b/hate_crack.py
@@ -1121,7 +1121,7 @@ def main():
     if hcatHashType == "1000":
         lmHashesFound = False
         hcatHashFileLine = open(hcatHashFile, "r").readline()
-        if re.search(r"[a-z0-9A-Z]{32}:[a-z0-9A-Z]{32}:[^:]*::$", hcatHashFileLine):
+        if re.search(r"[a-z0-9A-Z]{32}:[a-z0-9A-Z]{32}:.*::", hcatHashFileLine):
             print("PWDUMP format detected...")
             print("Parsing NT hashes...")
             subprocess.Popen(