updated regex for pwdump format checks

This commit is contained in:
bandrel
2019-01-29 17:29:01 -05:00
parent 5ec2a38d8d
commit 6705f3e5ff

View File

@@ -1121,7 +1121,7 @@ def main():
if hcatHashType == "1000":
lmHashesFound = False
hcatHashFileLine = open(hcatHashFile, "r").readline()
if re.search(r"[a-z0-9A-Z]{32}:[a-z0-9A-Z]{32}:[^:]*::$", hcatHashFileLine):
if re.search(r"[a-z0-9A-Z]{32}:[a-z0-9A-Z]{32}:.*::", hcatHashFileLine):
print("PWDUMP format detected...")
print("Parsing NT hashes...")
subprocess.Popen(