+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Windows 8.1 How to get plain password from logged off user [I have admin privilegies] (/showthread.php?tid=5275719)
Windows 8.1 How to get plain password from logged off user [I have admin privilegies] - kristijan97 - May 20, 2016
Hello,
I'm in domain and have access to normal domain user which have local admin privilegies on my PC. Another domain user can login on my PC whether my PC is on domain network or not but he must login at least once on my PC when my PC was on domain network.
So, his password is stored somewhere on my PC because he can login on his account even my PC is not on domain network.
Can I get his password in plain text if I have local admin privilegies on my PC?
* - doggo - May 20, 2016
You could try using mimikatz, run it as admin, run the commands:
# privilege :: debug
# sekurlsa :: logonPasswords full
You might require the user to have an open session at the same endpoint.
* - kristijan97 - May 23, 2016
Thanks! Mimikatz works great when user has open session, but mimikatz cannot extract password from logouted user
Is there any way to do the same thing, but on logouted user?