Dump LSASS credentials using MimiKatz

Download and install powershell script that can be used to pull MimiKatz from Operator and execute a "sekurlsa::logonpasswords". menuPass has used mimikatz.exe to dump credentials locally using the CMD option.
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.


Test this TTP

Download Operator (1.7.1)
Test this TTP using one of our Operator chains
Is my host protected against Cuba Ransomware?


Stage and execute Cuba Ransomware.