Tags: bestshow/mimikatz
Tags
New DPAPI stuff & crypto [new] dpapi::masterkey now supports SID with SYSTEM_DPAPI (for @dirkjanm services ;)) [new] dpapi::cache filter non relevant SIDs [new] dpapi::cred now supports WinInet double DPAPI [new] dpapi::blob /raw for hex input [new] dpapi::blob /ascii to force ascii output (when not unicode data) [new] crypto:: & dpapi::cng key & certificates flags from current SDK (VSM) [new] sr98::nedap module (@iceman1001 <3) [new] lsadump::mbc to dump MachineBoundCertificate
A commit to make Carlos @darkoperator happy [new] mimikatz lsadump::cache /dcc:<hash> to support pushing a previous one without knowing NTLM or password [new] mimikatz misc::lock to lock the session of current user/all users if available (privilege::debug) [fix gentilkiwi#220] that damn wcsicmp/_wcsicmp ;)
[new] mimikatz dpapi::ps function to deal with PSCredential and Secur… …eString XML files. [fix gentilkiwi#214] Fis sekurlsa key import for Windows 1809
[new] sr98::noralsy encoder, sr98::em4100 reader [fix] net::trust legacy flags [fix] dpapi decrypt by rpc, remove /system flag (incompatible with system key)
[fix] mimikatz sekurlsa::kerberos for Windows 1903 (build 18362) for x86