This is turning out even better then expected, not only it works when all else fail- its also way more stealthy as no driver needed, no injections are required, no hooks set up. This will get used by pentesters alot- imagine harvesting all used AD passwords used on a jumpbox.https://twitter.com/gentilkiwi/status/1393986751501307906 …
So #mimikatz wanted passwords, and Terminal Server has some for us
Cleartext passwords *decrypted* on a fully, up to date Windows 2019 Server
No library, no previous code injection, and doesn't use junk part of memory
Ping @jonasLyk, still in testing ... 
pic.twitter.com/F2ALmSSRyd
Cleartext passwords *decrypted* on a fully, up to date Windows 2019 Server
No library, no previous code injection, and doesn't use junk part of memory
Ping pic.twitter.com/F2ALmSSRyd
Show this thread
Show this thread
