HiveJack

HiveJack 该工具可在内部渗透测试期间用于从已被攻陷的主机中转储Windows凭据。它允许转储SYSTEM、SECURITY和SAM注册表配置单元，一旦复制到攻击者机器上，便会提供删除这些文件以清除痕迹的选项。 通常，这是一个重复的过程：一旦攻击者在被攻陷的主机上获得系统级访问权限，转储配置单元值就是下一步。在内部渗透测试中，时间非常宝贵。HiveJack 将在转储和删除文件时为您节省大量时间。您再也不用记住执行这些操作的命令了。😉 文件被转储到被攻陷主机的 c:\temp\ 文件夹中： 点击 Delete Hives 按钮后，文件被成功从被攻陷主机上删除：...

HiveJack - This Tool Can Be Used During Internal Penetration Testing To Dump Windows Credentials From An Already-Compromised Host

This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM, SECURITY and SAM registry hives and once copied to the attacker machines provides an option to delete these files to clear the trace. Often, this i...