Mimikatz

Description

(SANS) Mimikatz provides a wealth of tools for collecting and making use of Windows credentials on target systems, including retrieval of cleartext passwords, Lan Manager hashes, and NTLM hashes, certificates, and Kerberos tickets. The tools run with varying success on all versions of Windows from XP forward, with functionality somewhat limited in Windows 8.1 and later.

Names

Name
Mimikatz

Category

Tools

Type

• Credential stealer
• Keylogger

Information

• https://github.com/gentilkiwi/mimikatz
• https://www.sans.org/reading-room/whitepapers/intrusion/mimikatz-overview-defenses-detection-36780
• https://www.wired.com/story/how-mimikatz-became-go-to-hacker-tool/
• https://www.crowdstrike.com/blog/credential-theft-mimikatz-techniques/

Mitre Attack

• https://attack.mitre.org/software/S0002/

Malpedia

• https://malpedia.caad.fkie.fraunhofer.de/details/win.mimikatz

Alienvault Otx

• https://otx.alienvault.com/browse/pulses?q=tag:mimikatz

Other Information

Uuid

8f0da519-c1bc-4add-9e04-2c429e74564f

Last Card Change

2020-05-14