-
Notifications
You must be signed in to change notification settings - Fork 3.7k
module ~ standard
This is the main module of mimikatz
, it contains quick commands to operate with the tool.
For this particular one, no need to prefix command by the module name (but it works too ;)), eg: exit
is the same as standard::exit
.
Commands: exit, cls, answer, sleep, log, base64, version
Quits mimikatz
, after cleaning routines.
mimikatz # exit
Bye!
Clears screen, by filling the console window with spaces.
mimikatz # cls
Remark: it does not work with remote execution tools like psexec
, meterpreter
or others.
Gives the Answer to the Ultimate Question of Life, the Universe, and Everything.
mimikatz # answer
42.
Sleeps an amount of milliseconds (1000 ms by default).
Argument(s):
-
number
- optional - the number of milliseconds to sleep (default is 1000)
mimikatz # sleep
Sleep : 1000 ms... End !
mimikatz # sleep 4200
Sleep : 4200 ms... End !
Logs all outputs to a file (mimikatz.log
by default).
Argument(s):
-
filename
- optional - the file name for the log file -
/stop
- optional - stop the file logging
mimikatz # log
Using 'mimikatz.log' for logfile : OK
mimikatz # log other.log
Using 'other.log' for logfile : OK
mimikatz # log /stop
Using '(null)' for logfile : OK
Switches from file writing on the disk, to Base64
output instead.
mimikatz # base64
isBase64Intercept was : false
isBase64Intercept is now : true
mimikatz # kerberos::list /export
[00000000] - 17
Start/End/MaxRenew: 24/04/2014 08:24:20 ; 24/04/2014 18:17:29 ; 01/05/2014 08:17:29
Server Name : krbtgt/CHOCOLATE.LOCAL @ CHOCOLATE.LOCAL
Client Name : Administrateur @ CHOCOLATE.LOCAL
Flags 60a00000 : pre_authent ; renewable ; forwarded ; forwardable ;
====================
Base64 of file : 0-60a00000-Administrateur@krbtgt~CHOCOLATE.LOCAL-CHOCOLATE.LOCAL.kirbi
====================
GwYDVQQDExRDZXJ0ZXVyb3BlIFJvb3QgQ0EgMjAeFw0wNzAzMjcyMjAwMDBaFw0z
NzAzMjcyMzAwMDBaMFoxCzAJBgNVBAYTAkZSMRMwEQYDVQQKEwpDZXJ0ZXVyb3Bl
...
OMF3YGMtrQycPKqYskOj1EbcDdw2HzIuaLp8ZSFBl5aQZxTWpC/9IT9//CJ7KjVY
9Ubxkw7Z7eA6Jn9uLo+YuE/UmQ==
====================
* Saved to file : 0-60a00000-Administrateur@krbtgt~CHOCOLATE.LOCAL-CHOCOLATE.LOCAL.kirbi
Remark: Commands that want to write file on disk think they do (they indicate that files are saved to disk)
Displays versions of mimikatz
and Windows
mimikatz # version
mimikatz 2.0 alpha (arch x86)
NT - Windows NT 6.1 build 7601 (arch x64)