go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

mscache

mscache 一个用于操作 Windows 注册表中 DCC（域缓存凭据）的工具，主要基于 mimikatz 和 impacket 的工作。 依赖 python2 pycrypto passlib impacket 示例 python mscache.py --security security --system system 转储域缓存凭据 reg query "HKEYLOCALMACHINE\SECURITY\Cache" /v "NL$1" 2018-08-22 06:27:58 username: subuser domain groups: 513, 512 mscache...