Dont ask about the name : yes it does not mean much but this is all I got so far…<\/p>\n
A tribute to\u00a0https:\/\/github.com\/gentilkiwi\/mimikatz<\/a>… Source code on github here<\/a>.<\/p>\n Command line so far:<\/p>\n Command line as below: Dont ask about the name : yes it does not mean much but this is all I got so far… A tribute to\u00a0https:\/\/github.com\/gentilkiwi\/mimikatz… And generally speaking a tool to handle windows passwords and perform lateral movement. https:\/\/attack.mitre.org\/matrices\/enterprise\/windows\/\u00a0is definitely worth reading as well. Source code on github here. Command line so far: Command line as below: […]<\/a><\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[118],"tags":[],"class_list":["post-2166","post","type-post","status-publish","format-standard","hentry","category-nthash","category-118-id","post-seq-1","post-parity-odd","meta-position-corners","fix"],"_links":{"self":[{"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/posts\/2166","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2166"}],"version-history":[{"count":3,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/posts\/2166\/revisions"}],"predecessor-version":[{"id":2198,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=\/wp\/v2\/posts\/2166\/revisions\/2198"}],"wp:attachment":[{"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2166"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2166"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/labalec.fr\/erwan\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nAnd generally speaking a tool to handle windows passwords and perform lateral movement<\/a>.
\nhttps:\/\/attack.mitre.org\/matrices\/enterprise\/windows\/<\/a>\u00a0is definitely worth reading as well.<\/p>\n
\nNTHASH \/setntlm [\/server:hostname] \/user:username \/newhash:xxx
\nNTHASH \/setntlm [\/server:hostname] \/user:username \/newpwd:xxx
\nNTHASH \/changentlm [\/server:hostname] \/user:username \/oldpwd:xxx \/newpwd:xxx
\nNTHASH \/changentlm [\/server:hostname] \/user:username \/oldhash:xxx \/newpwd:xxx
\nNTHASH \/changentlm [\/server:hostname] \/user:username \/oldpwd:xxx \/newhash:xxx
\nNTHASH \/changentlm [\/server:hostname] \/user:username \/oldhash:xxx \/newhash:xxx
\nNTHASH \/gethash \/password:password
\nNTHASH \/getsid \/user:username [\/server:hostname]
\nNTHASH \/getusers [\/server:hostname]
\nNTHASH \/getdomains [\/server:hostname
\nNTHASH \/dumpsam
\nNTHASH \/dumphashes [\/offline]
\nNTHASH \/dumphash \/rid:123 [\/offline]
\nNTHASH \/getsamkey [\/offline]
\nNTHASH \/getsyskey [\/offline]
\nNTHASH \/getlsakeys
\nNTHASH \/wdigest
\nNTHASH \/logonpasswords
\nNTHASH \/pth \/user:username \/password:myhash \/domain:mydomain
\nNTHASH \/enumcred
\nNTHASH \/enumcred2
\nNTHASH \/enumvault
\nNTHASH \/chrome [\/binary:path_to_database]
\nNTHASH \/firefox [\/binary:path_to_database]
\nNTHASH \/cryptunprotectdata \/binary:filename
\nNTHASH \/cryptunprotectdata \/input:string
\nNTHASH \/cryptprotectdata \/input:string
\nNTHASH \/runasuser \/user:username \/password:password [\/binary: x:\\folder\\bin.exe]
\nNTHASH \/runastoken \/pid:12345 [\/binary: x:\\folder\\bin.exe]
\nNTHASH \/runaschild \/pid:12345 [\/binary: x:\\folder\\bin.exe]
\nNTHASH \/runas [\/binary: x:\\folder\\bin.exe]
\nNTHASH \/runts \/user:session_id [\/binary: x:\\folder\\bin.exe]
\nNTHASH \/runwmi \/binary:c:\\folder\\bin.exe [\/server:hostname]
\nNTHASH \/enumpriv
\nNTHASH \/dumpprocess \/pid:12345
\nNTHASH \/bytetostring \/input:hexabytes
\nNTHASH \/stringtobyte \/input:string
\nNTHASH \/base64encodew \/input:string
\nNTHASH \/base64encode \/input:string
\nNTHASH \/base64decode \/input:base64string
\nNTHASH \/a_command \/verbose
\nNTHASH \/a_command \/system<\/p>\n","protected":false},"excerpt":{"rendered":"