lsa

Jump to bottom

skelsec edited this page Apr 16, 2021 · 4 revisions

Subcommands in this section are responsible to parsing various file formats containing LSASS process memory space.

Home

Wiki

Live commands

lsa
kerberos
- currentluid
- roast
- tgt
- apreq
- purge
- sessions
- dump
- triage
smbapi
- share
- session
- localgroup
users
token
process
dpapi
- keys
- vpol
- vcred
- cred
- blob
- blobfile
- securestring
- securestringfile
- wifi
smb
- client
- shareenum
- lsassdump
- regdump
- dcsync
- secretsdump
ldap
- client

Platform-independent commands

lsa
- minidump
registry
crypto
- nt
- lm
- dcc
- dcc2
- gppass
kerberos
- tgt
- tgs
- brute
- asreproast
- spnroast (aka. kerberoast)
- s4u
- keytab
- kirbi
- ccache
  - list
  - del
  - roast
  - loadkirbi
  - exportkirbi
dpapi
- prekey
- minidump
- masterkey
- blob
- securestring
- credential
- vpol
- vcred
smb
- client
- lsassfile
- lsassdump
- regfile
- regdump
- dcsync
- secretsdump
- shareenum
ldap
- client

ConnectionURL

ConnectionURL

Clone this wiki locally