← All tools

Impacket-secretsdump

https://github.com/fortra/impacket

Open Source ◆ Kali Linux

Categories

Password Attacks Post-Exploitation

Description

Dumps secrets remotely using a variety of techniques including DCSync (without running code on DC), VSS, and SAM dump. Part of the Impacket suite, extracts NTLM hashes, Kerberos keys, and cleartext credentials.

Keywords

DCSync credential dumping NTLM SAM NTDS Active Directory hashes Kerberos keys

Example Usage

impacket-secretsdump domain/admin:password@192.168.1.1
impacket-secretsdump -just-dc-ntlm domain/admin:password@dc.domain.local
impacket-secretsdump -ntds ntds.dit -system SYSTEM LOCAL