reminder- also to myself, not out yet- wait and see, maybe i misunderstood the video etc. so do not jump to conclusions yet, lets wait and see what magic Australia will bring
Show this thread
This is turning out even better then expected, not only it works when all else fail- its also way more stealthy as no driver needed, no injections are required, no hooks set up. This will get used by pentesters alot- imagine harvesting all used AD passwords used on a jumpbox.https://twitter.com/gentilkiwi/status/1393986751501307906 …
So #mimikatz wanted passwords, and Terminal Server has some for us
Cleartext passwords *decrypted* on a fully, up to date Windows 2019 Server
No library, no previous code injection, and doesn't use junk part of memory
Ping @jonasLyk, still in testing ... 
pic.twitter.com/F2ALmSSRyd
Cleartext passwords *decrypted* on a fully, up to date Windows 2019 Server
No library, no previous code injection, and doesn't use junk part of memory
Ping pic.twitter.com/F2ALmSSRyd
Show this thread
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Is this based on your RDP findings?https://twitter.com/jonasLyk/status/1393058962942083076?s=20 …
- End of conversation
New conversation -
-
-
@readwiseio save thread -
Done! We've saved this whole thread to your library so you can revisit/remember it
Stats:
• 1 save of this thread (ranked #13409)
• 1 unique save of jonasLyk's threads (ranked #6085)
• 1 total save of jonasLyk's threads (ranked #7455)
End of conversation
New conversation -
-
-
does this apply to NLA/CredSSP only?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
This is fucking awesome. Hats off my man
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.