← All tools

Impacket-secretsdump

https://github.com/fortra/impacket

Open Source ◆ Kali Linux

Categories

Password Attacks Post-Exploitation

Description

Dumps secrets remotely using a variety of techniques including DCSync (without running code on DC), VSS, and SAM dump. Part of the Impacket suite, extracts NTLM hashes, Kerberos keys, and cleartext credentials.

Keywords

DCSync credential dumping NTLM SAM NTDS Active Directory hashes Kerberos keys

Example Usage

impacket-secretsdump domain/admin:password@192.168.1.1
impacket-secretsdump -just-dc-ntlm domain/admin:password@dc.domain.local
impacket-secretsdump -ntds ntds.dit -system SYSTEM LOCAL

See also

Nishang

Open Source Kali

Framework and collection of PowerShell scripts and payloads for offensive security and post-exploita…

Sliver

Open Source

Open-source C2 framework from BishopFox. Supports mTLS, WireGuard, HTTP/S, and DNS C2 channels. Feat…

Kerbrute

Open Source Kali

Kerberos brute-forcing tool for performing user enumeration and password spraying against Active Dir…

PEASS-ng (WinPEAS / LinPEAS)

Open Source Kali

Privilege Escalation Awesome Scripts Suite. Automatically enumerates Windows (WinPEAS) and Linux/Mac…

Medusa

Open Source Kali

Speedy, massively parallel, modular login brute-forcer. Supports AFP, CVS, FTP, HTTP, IMAP, MS-SQL, …

Aircrack-ng

Open Source Kali

Complete suite of tools for 802.11 WEP and WPA/WPA2 cracking. Includes monitoring (airodump-ng), att…