Skip to content

Add timestamp to SAM parsing#2142

Open
laxa wants to merge 1 commit intofortra:masterfrom
laxa:sam_pwd_last_set
Open

Add timestamp to SAM parsing#2142
laxa wants to merge 1 commit intofortra:masterfrom
laxa:sam_pwd_last_set

Conversation

@laxa
Copy link
Contributor

@laxa laxa commented Mar 13, 2026

This PR now makes secretsdump.py correctly taking into account the -pwd-last-set switch, in the same manners as for NTDS:

$ secretsdump.py -sam SAM local -system SYSTEM  -history -user-status -pwd-last-set
Impacket v0.14.0.dev0+20260313.105252.dabf7fd2 - Copyright Fortra, LLC and its affiliated companies

[*] Target system bootKey: 0xbf5bd1d1a9ca5e44da708a1d6aef2604
[*] Dumping local SAM hashes (uid:rid:lmhash:nthash)
Administrator:500:aad3b435b51404eeaad3b435b51404ee:70119c587e49df552fcd9d4e1d849cfd::: (pwdLastSet=2026-03-13 14:55:09) (Enabled=True) (Locked=False) (Admin=True)
[...]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant