Mimikatz – Extract Passwords/Hash/PIN/Kerberos tickets

With 0 comments

Mimikatz is an open-source utility that enables the viewing of credential information from the Windows lsass (Local Security Authority Subsystem Service) through its sekurlsa module which includes plaintext passwords and Kerberos tickets which could then be used for attacks such as pass-the-hash and pass-the-ticket. Most anti-virus tools will detect the presence of Mimikatz as a threat and delete it but it can be interesting to test security on systems.

try to use mimikatz payloads on a USB Rubber Ducky: