Type your comment> @peek said:
i was wondering the same, but no idea why they share the same workgroup. I used pw spray for the other box
This was particularly strange, because spray is just a bash script with vars and loops. It did make a reference to rpcclient for smb spray…maybe all the other tools do too? But that doesn’t explain hashcat and john. Unless they have their own cached files from when I worked on forest? I did use both at the time… I dont know.