Using Kiwi in Metasploit

Metasploit offers Mimikatz and Kiwi extensions to perform various types of credential-oriented operations, such as dumping passwords and hashes, dumping passwords in memory, generating golden tickets, and much more. Let's load kiwi in Metasploit as follows:

Once we have loaded the kiwi module, we can see that we have an entire menu of commands we can use, as shown in the following screenshot:

Let's try running lsa_dump_secrets commands, and check if we can dump something or not:

Bingo! We can see that we have successfully ...

Get Mastering Metasploit - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.