Blazz3/wdldumper

Simple lsass dumper (and wdigest enabler) that leverages on impacket, pypykatz and lsassy.

wdldumper

WDLDumper > WDigest Lsass Dumper

Simple wrapper to dump lsass: enable remote wdigest (impacket wmiexec.py powershell), perform remote lsass dump (impacket wmiexec.py powershell) and lsass parsing (pypykatz + lsassy).

Tested on Win10. Admin creds needed.

Python => 3.6 needed.

Dependencies:

https://github.com/SecureAuthCorp/impacket

https://github.com/skelsec/pypykatz

https://github.com/Hackndo/lsassy