Ntlm-hash-decrypter ^new^ Link
If you crack a hash and discover a valid password (e.g., for your own forgotten admin account), great. If you crack someone else's hash during an authorized test, document it in your report and recommend stronger password policies.