mimiDbg
mimiDbg copied to clipboard
PowerShell oneliner to retrieve wdigest passwords from the memory
Error in setting the parameter $iv with value " db lsasrv!InitializationVector " Which break the whole sequence of triple DES I traced it until landing to this error : PS...
I ran it via the oneliner and received the following error: Mount-DbgDumpFile : DbgEng API returned 0xd000011e. At line:1 char:933 + ... eStream.Close();}Mount-DbgDumpFile -DumpFile $processDumpPath;$faObj ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo...