This guide is part of the https://www.youtube.com/channel/UC0ZTPkdxlAKf-V33tqXwi3Q Red Team series of guides. Credential Access consists of techniques for stealing credentials like account names and passwords. Techniques used to get credentials include: keylogging or credential dumping. Using legitimate credentials can give adversaries access to systems, make them harder to detect, and provide the opportunity to create more accounts to help achieve their goals. Chapters: 0:00 Introduction 0:30 What We’ll Be Covering 0:56 What is Credential Access? 1:57 Mitre Attack Techniques - Credential Access 2:39 Let’s Get Started 2:54 What is mimikatz? 3:52 Using mimikatz with our High Integrity Agent 6:30 Are There Any Login Passwords in Memory? 7:55 Using lsadump 9:20 Using the meterprater 14:46 Preparing the mimikatz Binaries 16:40 Dumping the Login Passwords 19:12 Using hash dump 19:30 Loading mimikatz with load_kiwi 19:49 Using the lsa_dump_sam and lsa_dump_secrets Command 21:07 Results from the Powershell Agent 21:57 Using the mimikatz-cache Module 22:24 Locating Our unattended.xml File 24:25 Uploading the Binary to the Target 26:54 Listing Login Sessions 28:54 Our Second Windows Target 29:21 Running mimikatz Modules using Starkiller 30:12 Listing Tokens We Can Impersonate 30:42 Uploading mimikatz 31:33 Using logonpasswords 32:46 Using lsadump::sam 33:15 Using sekursla::logonpasswords 34:14 Using the Windows Credentials Editor 36:46 Using hashdump 37:50 Using johntheripper 39:50 Conclusion New to Cloud Computing? Get started here with a $100 credit → https://www.linode.com/linodetube Read the doc for more information on Credential Access → https://www.linode.com/docs/guides/windows-red-team-credential-access-with-mimikatz/ Learn more about Hackersploit https://www.linode.com/docs/guides/hackersploit-red-team-series/ Subscribe to get notified of new episodes as they come out → null #Linode #Security #RedTeam #Hackersploit Product: Linode, Security, Red Team; @HackerSploit ;