Skip to content

Instantly share code, notes, and snippets.

@hoodoer
Created December 10, 2019 09:33
Show Gist options
  • Save hoodoer/ed7a884c37e30e194b69b02db4788703 to your computer and use it in GitHub Desktop.
Save hoodoer/ed7a884c37e30e194b69b02db4788703 to your computer and use it in GitHub Desktop.
Crack Map Exec (CME) oneliner to parse out plaintext creds from cme --lsa
cat ~/.cme/logs/*secrets | egrep -v '(sha1|md5|DPAPI_SYSTEM|dpapi|NL\$KM|L\$|\$:aad3b435b51404eeaad3b435b51404ee)' | sort -u
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment