Fix EOFError in sam plugin on empty lm/nt hash (fox-it#478)

JSCU-CNI · Jan 2, 2024 · df8ea3e · df8ea3e
1 parent 61e751d
commit df8ea3e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/dissect/target/plugins/os/windows/sam.py b/dissect/target/plugins/os/windows/sam.py
@@ -252,6 +252,9 @@ def rid_to_key(rid: int) -> tuple[bytes, bytes]:
 
 
 def decrypt_single_hash(rid: int, samkey: bytes, enc_hash: bytes, apwd: bytes) -> bytes:
+    if not enc_hash:
+        return b""
+
     sh = c_sam.SAM_HASH(enc_hash)
 
     if sh.revision not in [0x01, 0x02]: