killchain-compendium/post_exploitation/docs/powershell.md

9 lines
154 B
Markdown
Raw Normal View History

2021-09-08 02:09:14 +02:00
# Powershell
## HashDump
```sh
save HKLM\SAM C:\Users\Administrator\Desktop\SAM
save HKLM\SAM C:\Users\Administrator\Desktop\System
```
* Use `samdump2`