Juil 092023
Decrypt NTDS (aka NT Directory Service) active directory hashes for servers up to windows 2012r2 (rc4) and windows 2016 and up (aes). NTDS uses the Extensible Storage Engine format (aka ESE).
You can obtain the systemkey offline using nthash and the system registry file.
Sourcecode and binary are here.
