This patch is for john the ripper and adds the ability to crack MS Cached Credential hashes. To be used in conjunction with the Cachedump tool. This version uses a slower but portable md4 implementation.
7fdd732996b4e3a473102028ee1d49679de02550673f88528c5a3c22ba52bd53
CacheDump is a tool that demonstrates how to recover cache entry information: username and hashed password (called MSCASH). This tool also explains the technical issues underneath Windows password cache entries, which are undocumented by Microsoft.
ab7690f54598c6254f09bbf76f2ad400a7fc3f5df5af80af2faed70120d1abbf