Par : Mimikatz 非官方指南和命令参考_Part1 – L-pkav@安全与编程
[…] GentilKiwi Blog (博客里的大多数内容是用法语写的,请使用 Chrome 浏览器进行自动翻译) […]
View ArticlePar : 看我如何从一个APK到最终拿下域管理权限? - FreeBuf.COM |关注黑客与极客
[…] v ##’ http://blog.gentilkiwi.com/mimikatz […]
View ArticlePar : Python Backdoor – Persistence – Technic Dynamic
[…] can download mimikatz from the author’s website: [ Gentil Kiwi […]
View ArticlePar : Mimikatz小实验:黄金票据+dcsync – FreeBuf.COM |关注黑客与极客 –雨后sunshine
[…] 首先,我以较低的权限运行了mimikatz,这个权限为Windows工作站的本地用户,也就是我demo域成员。在这里,我们需要生成一张黄金票据(Golden Ticket),利用它来获得域管理权限。然后,咱们再使用mimikatz的dcsync功能,从域控制器获取hash。 […]
View ArticlePar : Restricted Admin Mode For RDP ( Sınırlandırılmış Yönetici Modu ) – My Blog
[…] açmış diğer yöneticilerin de oturum bilgisini almak için mimikatz aracını kullanalım. Mimikatz aracı; dump edilmiş bir kimlik doğrulayıcısından (lsass.exe) şifreleri almaya yarayan basit bir […]
View ArticlePar : Восстанавливаем локальные и доменные пароли из hiberfil.sys — PERSONAL...
[…] mimikatz, позволяющая извлекать учётные данные Windows из LSA в […]
View ArticlePar : hackerz(good)
please add a tool for removable drive (usb and others ) in misc and override administrator security :-) then nice work for the tools
View ArticlePar : Hash传递攻击Windows2012远程桌面 ||杂术馆
[…] 所以,开启了受限管理员模式之后,一些恢复已登录用户明文密码的工具比如minikatz就会失效了.基于这个理由,系统管理员肯定会被建议在2012的系统上开启这个特性.它的缺点是这个RDP会话中向外的连接可能无法通过认证,比如映射共享文件夹.所以连接一个独立的服务器的时候,这个特性很有用,连接一个跳板服务器的时候开启这个特性就没必要了. […]
View ArticlePar : Nacho Valle
Awesome job! it helped me a lot through a remote session in a machine thet needed a restart & the owner did’nt gave me the admin password, so i was in the machine in an administrator session, i’ve...
View ArticlePar : Lista com ferramentas de segurança e pentest – Gianfratti.com
[…] 6. WCE-Windows Credentials Editor (http://www.ampliasecurity.com/research/wcefaq.html) 7. Mimikatz (http://blog.gentilkiwi.com/mimikatz) 8. OphtCrack 9. Integrigy...
View ArticlePar : Hack Like Mr. Robot, Own a Computer in 14 Seconds — The Hack Today
[…] payload in question here uses a variant of Mimikatz, a tool by gentilkiwi that can dump cleartext passwords from memory. The Invoke-Mimikatz variant by […]
View Article