how to A 9-step recipe to crack a NTLMv2 Hash from a freshly acquired .pcap Open your .pcap that contains an NTLMv2 hash in Wireshark.Filter by ntlmssp to get the authentication handshake.artisanal smb2 authentication packets3. In this case, we get three packets. Find the NTLMSSP_AUTH