knowsmore.py --word-list -o wl.txt --batch --name companyname
knowsmore.py --word-list -o wl.txt --batch --name companyname -l 1

knowsmore --stats

KnowsMore v0.1.4 by Helvio Junior
Active Directory, BloodHound, NTDS hashes and Password Cracks correlation tool
https://github.com/helviojunior/knowsmore
    
 [+] Startup parameters
     command line: knowsmore --stats 
     module: stats
     database file: knowsmore.db
  
 [+] start time 2023-01-11 03:59:20
[?] General Statistics
+-------+----------------+-------+
|   top | description    |   qty |
|-------+----------------+-------|
|     1 | Total Users    | 95369 |
|     2 | Unique Hashes  | 74299 |
|     3 | Cracked Hashes | 23177 |
|     4 | Cracked Users  | 35078 |
+-------+----------------+-------+

 [?] General Top 10 passwords
+-------+-------------+-------+
|   top | password    |   qty |
|-------+-------------+-------|
|     1 | password    |  1111 |
|     2 | 123456      |   824 |
|     3 | 123456789   |   815 |
|     4 | guest       |   553 |
|     5 | qwerty      |   329 |
|     6 | 12345678    |   277 |
|     7 | 111111      |   268 |
|     8 | 12345       |   202 |
|     9 | secret      |   170 |
|    10 | sec4us      |   165 |
+-------+-------------+-------+

 [?] Top 10 weak passwords by company name similarity
+-------+--------------+---------+----------------------+-------+
|   top | password     |   score |   company_similarity |   qty |
|-------+--------------+---------+----------------------+-------|
|     1 | company123   |    7024 |                   80 |  1111 |
|     2 | Company123   |    5209 |                   80 |   824 |
|     3 | company      |    3674 |                  100 |   553 |
|     4 | Company@10   |    2080 |                   80 |   329 |
|     5 | company10    |    1722 |                   86 |   268 |
|     6 | Company@2022 |    1242 |                   71 |   202 |
|     7 | Company@2024 |    1015 |                   71 |   165 |
|     8 | Company2022  |     978 |                   75 |   157 |
|     9 | Company10    |     745 |                   86 |   116 |
|    10 | Company21    |     707 |                   86 |   110 |
+-------+--------------+---------+----------------------+-------+

# pipx स्थापित करें (यदि अभी तक नहीं है)
python3 -m pip install --user pipx

# सुनिश्चित करें कि pipx-स्थापित ऐप्स आपके PATH पर हैं
python3 -m pipx ensurepath

# KnowsMore स्थापित करें
pipx install knowsmore

# नवीनतम संस्करण में अपग्रेड करें
pipx upgrade knowsmore

pipx inject knowsmore setuptools

pip3 install --upgrade knowsmore

knowsmore --create-db

# Bloodhound ZIP फ़ाइल
knowsmore --bloodhound --import-data ~/Desktop/client.zip

# Bloodhound JSON फ़ाइल
knowsmore --bloodhound --import-data ~/Desktop/20220912105336_users.json

# Bloodhound ZIP फ़ाइल
knowsmore --bloodhound --sync 10.10.10.10:7687 -d neo4j -u neo4j -p 12345678

knowsmore --secrets-dump -target LOCAL -ntds ~/Desktop/ntds.dit -system ~/Desktop/SYSTEM

secretsdump.py -ntds ntds.dit -system system.reg -hashes lmhash:ntlmhash LOCAL -outputfile ~/Desktop/client_name

knowsmore --ntlm-hash --import-ntds ~/Desktop/client_name.ntds

knowsmore --word-list -o "~/Desktop/Wordlist/my_custom_wordlist.txt" --batch --name company_name

# NTLM हैश को फ़ाइल में निकालें
nowsmore --ntlm-hash --export-hashes "~/Desktop/ntlm_hash.txt"

# या, NTDS फ़ाइल से NTLM हैश निकालें
cat ~/Desktop/client_name.ntds | cut -d ':' -f4 > ntlm_hashes.txt

# वर्डलिस्ट आक्रमण
hashcat -m 1000 -a 0 -O -o "~/Desktop/cracked.txt" --remove "~/Desktop/ntlm_hash.txt" "~/Desktop/Wordlist/*"

# मास्क आक्रमण
hashcat -m 1000 -a 3 -O --increment --increment-min 4 -o "~/Desktop/cracked.txt" --remove "~/Desktop/ntlm_hash.txt" ?a?a?a?a?a?a?a?a

knowsmore --ntlm-hash --company clientCompanyName --import-cracked ~/Desktop/cracked.txt

knowsmore --wipe

knowsmore --user-pass --username administrator --password Sec4US@2023

# या कंपनी का नाम जोड़कर

knowsmore --user-pass --username administrator --password Sec4US@2023 --company sec4us

knowsmore --bloodhound --mark-owned 10.10.10.10 -d neo4j -u neo4j -p 123456

server.bolt.listen_address=0.0.0.0:7687