credential-access

What problem does it solve?

This Skill provides advanced techniques for extracting credentials from compromised systems and network traffic, enabling lateral movement and privilege escalation in security operations.

Core Features & Use Cases

• Credential Extraction: Extracts credentials using LSASS dumping, SAM/SECURITY hive extraction, DPAPI decryption, NTLM relay, and password spraying.
• LSASS Dumping: Offers multiple methods for extracting passwords from LSASS, including Mimikatz, nanodump, and comsvcs.dll.
• SAM/SECURITY Hive Extraction: Provides both local and remote methods for extracting credentials from SAM, SYSTEM, and SECURITY hives.
• DPAPI Secrets: Decrypts DPAPI-protected credentials for browsers and credential vaults.
• NTLM Relay Attacks: Performs NTLM relay attacks using ntlmrelayx.py and PetitPotam for lateral movement.
• Password Spraying: Implements password spraying using CrackMapExec and NetExec.
• Offline Hash Cracking: Offers hash cracking capabilities using Hashcat for password recovery.

Quick Start

Extract credentials from LSASS memory using mimikatz and export them to a file.