# Mimikatz 🥝

- [General 🛠️](https://tools.thehacker.recipes/mimikatz/general.md)
- [Modules](https://tools.thehacker.recipes/mimikatz/modules.md)
- [crypto](https://tools.thehacker.recipes/mimikatz/modules/crypto.md)
- [capi](https://tools.thehacker.recipes/mimikatz/modules/crypto/capi.md)
- [certificates](https://tools.thehacker.recipes/mimikatz/modules/crypto/certificates.md)
- [certtohw](https://tools.thehacker.recipes/mimikatz/modules/crypto/certtohw.md)
- [cng](https://tools.thehacker.recipes/mimikatz/modules/crypto/cng.md)
- [extract](https://tools.thehacker.recipes/mimikatz/modules/crypto/extract.md)
- [hash](https://tools.thehacker.recipes/mimikatz/modules/crypto/hash.md)
- [keys](https://tools.thehacker.recipes/mimikatz/modules/crypto/keys.md)
- [kutil 🛠️](https://tools.thehacker.recipes/mimikatz/modules/crypto/kutil.md)
- [providers](https://tools.thehacker.recipes/mimikatz/modules/crypto/providers.md)
- [sc](https://tools.thehacker.recipes/mimikatz/modules/crypto/sc.md)
- [scauth 🛠️](https://tools.thehacker.recipes/mimikatz/modules/crypto/scauth.md)
- [stores](https://tools.thehacker.recipes/mimikatz/modules/crypto/stores.md)
- [system](https://tools.thehacker.recipes/mimikatz/modules/crypto/system.md)
- [tpminfo](https://tools.thehacker.recipes/mimikatz/modules/crypto/tpminfo.md)
- [dpapi](https://tools.thehacker.recipes/mimikatz/modules/dpapi.md)
- [blob](https://tools.thehacker.recipes/mimikatz/modules/dpapi/blob.md)
- [cache](https://tools.thehacker.recipes/mimikatz/modules/dpapi/cache.md)
- [capi](https://tools.thehacker.recipes/mimikatz/modules/dpapi/capi.md)
- [chrome](https://tools.thehacker.recipes/mimikatz/modules/dpapi/chrome.md)
- [cloudapkd 🛠️](https://tools.thehacker.recipes/mimikatz/modules/dpapi/cloudapkd.md)
- [cloudapreg](https://tools.thehacker.recipes/mimikatz/modules/dpapi/cloudapreg.md)
- [cng](https://tools.thehacker.recipes/mimikatz/modules/dpapi/cng.md)
- [create 🛠️](https://tools.thehacker.recipes/mimikatz/modules/dpapi/create.md)
- [cred](https://tools.thehacker.recipes/mimikatz/modules/dpapi/cred.md)
- [credhist](https://tools.thehacker.recipes/mimikatz/modules/dpapi/credhist.md)
- [luna](https://tools.thehacker.recipes/mimikatz/modules/dpapi/luna.md)
- [masterkey](https://tools.thehacker.recipes/mimikatz/modules/dpapi/masterkey.md)
- [protect](https://tools.thehacker.recipes/mimikatz/modules/dpapi/protect.md)
- [ps](https://tools.thehacker.recipes/mimikatz/modules/dpapi/ps.md)
- [rdg](https://tools.thehacker.recipes/mimikatz/modules/dpapi/rdg.md)
- [sccm](https://tools.thehacker.recipes/mimikatz/modules/dpapi/sccm.md)
- [ssh](https://tools.thehacker.recipes/mimikatz/modules/dpapi/ssh.md)
- [tpm](https://tools.thehacker.recipes/mimikatz/modules/dpapi/tpm.md)
- [vault](https://tools.thehacker.recipes/mimikatz/modules/dpapi/vault.md)
- [wifi](https://tools.thehacker.recipes/mimikatz/modules/dpapi/wifi.md)
- [wwan](https://tools.thehacker.recipes/mimikatz/modules/dpapi/wwan.md)
- [event](https://tools.thehacker.recipes/mimikatz/modules/event.md)
- [clear](https://tools.thehacker.recipes/mimikatz/modules/event/clear.md)
- [drop](https://tools.thehacker.recipes/mimikatz/modules/event/drop.md)
- [kerberos](https://tools.thehacker.recipes/mimikatz/modules/kerberos.md)
- [ask](https://tools.thehacker.recipes/mimikatz/modules/kerberos/ask.md)
- [clist](https://tools.thehacker.recipes/mimikatz/modules/kerberos/clist.md)
- [golden](https://tools.thehacker.recipes/mimikatz/modules/kerberos/golden.md)
- [hash](https://tools.thehacker.recipes/mimikatz/modules/kerberos/hash.md)
- [list](https://tools.thehacker.recipes/mimikatz/modules/kerberos/list.md)
- [ptc](https://tools.thehacker.recipes/mimikatz/modules/kerberos/ptc.md)
- [ptt](https://tools.thehacker.recipes/mimikatz/modules/kerberos/ptt.md)
- [purge](https://tools.thehacker.recipes/mimikatz/modules/kerberos/purge.md)
- [tgt](https://tools.thehacker.recipes/mimikatz/modules/kerberos/tgt.md)
- [lsadump](https://tools.thehacker.recipes/mimikatz/modules/lsadump.md)
- [backupkeys](https://tools.thehacker.recipes/mimikatz/modules/lsadump/backupkeys.md)
- [cache](https://tools.thehacker.recipes/mimikatz/modules/lsadump/cache.md)
- [changentlm](https://tools.thehacker.recipes/mimikatz/modules/lsadump/changentlm.md)
- [dcshadow](https://tools.thehacker.recipes/mimikatz/modules/lsadump/dcshadow.md)
- [dcsync](https://tools.thehacker.recipes/mimikatz/modules/lsadump/dcsync.md)
- [mbc](https://tools.thehacker.recipes/mimikatz/modules/lsadump/mbc.md)
- [netsync](https://tools.thehacker.recipes/mimikatz/modules/lsadump/netsync.md)
- [lsa](https://tools.thehacker.recipes/mimikatz/modules/lsadump/lsa.md)
- [packages](https://tools.thehacker.recipes/mimikatz/modules/lsadump/packages.md)
- [postzerologon](https://tools.thehacker.recipes/mimikatz/modules/lsadump/postzerologon.md)
- [rpdata](https://tools.thehacker.recipes/mimikatz/modules/lsadump/rpdata.md)
- [sam](https://tools.thehacker.recipes/mimikatz/modules/lsadump/sam.md)
- [secrets](https://tools.thehacker.recipes/mimikatz/modules/lsadump/secrets.md)
- [setntlm](https://tools.thehacker.recipes/mimikatz/modules/lsadump/setntlm.md)
- [trust](https://tools.thehacker.recipes/mimikatz/modules/lsadump/trust.md)
- [zerologon](https://tools.thehacker.recipes/mimikatz/modules/lsadump/zerologon.md)
- [misc](https://tools.thehacker.recipes/mimikatz/modules/misc.md)
- [aadcookie](https://tools.thehacker.recipes/mimikatz/modules/misc/aadcookie.md)
- [clip](https://tools.thehacker.recipes/mimikatz/modules/misc/clip.md)
- [compress](https://tools.thehacker.recipes/mimikatz/modules/misc/compress.md)
- [cmd](https://tools.thehacker.recipes/mimikatz/modules/misc/cmd.md)
- [detours](https://tools.thehacker.recipes/mimikatz/modules/misc/detours.md)
- [easyntlmchall](https://tools.thehacker.recipes/mimikatz/modules/misc/easyntlmchall.md)
- [efs](https://tools.thehacker.recipes/mimikatz/modules/misc/efs.md)
- [lock](https://tools.thehacker.recipes/mimikatz/modules/misc/lock.md)
- [memssp](https://tools.thehacker.recipes/mimikatz/modules/misc/memssp.md)
- [mflt](https://tools.thehacker.recipes/mimikatz/modules/misc/mflt.md)
- [ncroutemon](https://tools.thehacker.recipes/mimikatz/modules/misc/ncroutemon.md)
- [ngcsign](https://tools.thehacker.recipes/mimikatz/modules/misc/ngcsign.md)
- [printnightmare](https://tools.thehacker.recipes/mimikatz/modules/misc/printnightmare.md)
- [regedit](https://tools.thehacker.recipes/mimikatz/modules/misc/regedit.md)
- [sccm](https://tools.thehacker.recipes/mimikatz/modules/misc/sccm.md)
- [shadowcopies](https://tools.thehacker.recipes/mimikatz/modules/misc/shadowcopies.md)
- [skeleton](https://tools.thehacker.recipes/mimikatz/modules/misc/skeleton.md)
- [spooler](https://tools.thehacker.recipes/mimikatz/modules/misc/spooler.md)
- [taskmgr](https://tools.thehacker.recipes/mimikatz/modules/misc/taskmgr.md)
- [wp](https://tools.thehacker.recipes/mimikatz/modules/misc/wp.md)
- [xor](https://tools.thehacker.recipes/mimikatz/modules/misc/xor.md)
- [net](https://tools.thehacker.recipes/mimikatz/modules/net.md): The net module of Mimikatz
- [alias](https://tools.thehacker.recipes/mimikatz/modules/net/alias.md)
- [deleg](https://tools.thehacker.recipes/mimikatz/modules/net/deleg.md)
- [group](https://tools.thehacker.recipes/mimikatz/modules/net/group.md)
- [if](https://tools.thehacker.recipes/mimikatz/modules/net/if.md)
- [serverinfo](https://tools.thehacker.recipes/mimikatz/modules/net/serverinfo.md)
- [session](https://tools.thehacker.recipes/mimikatz/modules/net/session.md)
- [share](https://tools.thehacker.recipes/mimikatz/modules/net/share.md)
- [stats](https://tools.thehacker.recipes/mimikatz/modules/net/stats.md)
- [tod](https://tools.thehacker.recipes/mimikatz/modules/net/tod.md)
- [trust](https://tools.thehacker.recipes/mimikatz/modules/net/trust.md)
- [user](https://tools.thehacker.recipes/mimikatz/modules/net/user.md)
- [wsession](https://tools.thehacker.recipes/mimikatz/modules/net/wsession.md)
- [privilege](https://tools.thehacker.recipes/mimikatz/modules/privilege.md)
- [backup](https://tools.thehacker.recipes/mimikatz/modules/privilege/backup.md)
- [debug](https://tools.thehacker.recipes/mimikatz/modules/privilege/debug.md)
- [driver](https://tools.thehacker.recipes/mimikatz/modules/privilege/driver.md)
- [id](https://tools.thehacker.recipes/mimikatz/modules/privilege/id.md)
- [name](https://tools.thehacker.recipes/mimikatz/modules/privilege/name.md)
- [restore](https://tools.thehacker.recipes/mimikatz/modules/privilege/restore.md)
- [security](https://tools.thehacker.recipes/mimikatz/modules/privilege/security.md)
- [sysenv](https://tools.thehacker.recipes/mimikatz/modules/privilege/sysenv.md)
- [tcb](https://tools.thehacker.recipes/mimikatz/modules/privilege/tcb.md)
- [process](https://tools.thehacker.recipes/mimikatz/modules/process.md)
- [exports](https://tools.thehacker.recipes/mimikatz/modules/process/exports.md)
- [imports](https://tools.thehacker.recipes/mimikatz/modules/process/imports.md)
- [list](https://tools.thehacker.recipes/mimikatz/modules/process/list.md)
- [resume](https://tools.thehacker.recipes/mimikatz/modules/process/resume.md)
- [run](https://tools.thehacker.recipes/mimikatz/modules/process/run.md)
- [runp](https://tools.thehacker.recipes/mimikatz/modules/process/runp.md)
- [start](https://tools.thehacker.recipes/mimikatz/modules/process/start.md)
- [stop](https://tools.thehacker.recipes/mimikatz/modules/process/stop.md)
- [suspend](https://tools.thehacker.recipes/mimikatz/modules/process/suspend.md)
- [rpc](https://tools.thehacker.recipes/mimikatz/modules/rpc.md): It can be used to control Mimikatz remotely through RPC
- [close](https://tools.thehacker.recipes/mimikatz/modules/rpc/close.md)
- [connect](https://tools.thehacker.recipes/mimikatz/modules/rpc/connect.md)
- [enum](https://tools.thehacker.recipes/mimikatz/modules/rpc/enum.md)
- [server](https://tools.thehacker.recipes/mimikatz/modules/rpc/server.md)
- [sekurlsa](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa.md)
- [backupkeys](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/backupkeys.md)
- [bootkey](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/bootkey.md)
- [cloudap](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/cloudap.md)
- [credman](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/credman.md)
- [dpapi](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/dpapi.md)
- [dpapisystem](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/dpapisystem.md)
- [ekeys](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/ekeys.md)
- [kerberos](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/kerberos.md)
- [krbtgt](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/krbtgt.md)
- [livessp](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/livessp.md)
- [logonpasswords](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/logonpasswords.md)
- [minidump](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/minidump.md)
- [msv](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/msv.md)
- [process](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/process.md)
- [pth](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/pth.md)
- [ssp](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/ssp.md)
- [tickets](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/tickets.md)
- [trust](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/trust.md)
- [tspkg](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/tspkg.md)
- [wdigest](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa/wdigest.md)
- [service](https://tools.thehacker.recipes/mimikatz/modules/service.md)
- [-](https://tools.thehacker.recipes/mimikatz/modules/service/undefined.md)
- [+](https://tools.thehacker.recipes/mimikatz/modules/service/+.md)
- [preshutdown](https://tools.thehacker.recipes/mimikatz/modules/service/preshutdown.md)
- [remove](https://tools.thehacker.recipes/mimikatz/modules/service/remove.md)
- [resume](https://tools.thehacker.recipes/mimikatz/modules/service/resume.md)
- [shutdown](https://tools.thehacker.recipes/mimikatz/modules/service/shutdown.md)
- [start](https://tools.thehacker.recipes/mimikatz/modules/service/start.md)
- [stop](https://tools.thehacker.recipes/mimikatz/modules/service/stop.md)
- [suspend](https://tools.thehacker.recipes/mimikatz/modules/service/suspend.md)
- [sid](https://tools.thehacker.recipes/mimikatz/modules/sid.md): The Security Identifier module of Mimikatz
- [add](https://tools.thehacker.recipes/mimikatz/modules/sid/add.md)
- [clear](https://tools.thehacker.recipes/mimikatz/modules/sid/clear.md)
- [lookup](https://tools.thehacker.recipes/mimikatz/modules/sid/lookup.md)
- [modify](https://tools.thehacker.recipes/mimikatz/modules/sid/modify.md)
- [patch](https://tools.thehacker.recipes/mimikatz/modules/sid/patch.md)
- [query](https://tools.thehacker.recipes/mimikatz/modules/sid/query.md)
- [standard](https://tools.thehacker.recipes/mimikatz/modules/standard.md)
- [answer](https://tools.thehacker.recipes/mimikatz/modules/standard/answer.md)
- [base64](https://tools.thehacker.recipes/mimikatz/modules/standard/base64.md)
- [cd](https://tools.thehacker.recipes/mimikatz/modules/standard/cd.md)
- [cls](https://tools.thehacker.recipes/mimikatz/modules/standard/cls.md)
- [coffee](https://tools.thehacker.recipes/mimikatz/modules/standard/coffee.md)
- [exit](https://tools.thehacker.recipes/mimikatz/modules/standard/exit.md)
- [hostname](https://tools.thehacker.recipes/mimikatz/modules/standard/hostname.md)
- [localtime](https://tools.thehacker.recipes/mimikatz/modules/standard/localtime.md)
- [log](https://tools.thehacker.recipes/mimikatz/modules/standard/log.md)
- [sleep](https://tools.thehacker.recipes/mimikatz/modules/standard/sleep.md)
- [version](https://tools.thehacker.recipes/mimikatz/modules/standard/version.md)
- [token](https://tools.thehacker.recipes/mimikatz/modules/token.md): The Windows tokens manipulation module of Mimikatz
- [elevate](https://tools.thehacker.recipes/mimikatz/modules/token/elevate.md)
- [list](https://tools.thehacker.recipes/mimikatz/modules/token/list.md)
- [revert](https://tools.thehacker.recipes/mimikatz/modules/token/revert.md)
- [run](https://tools.thehacker.recipes/mimikatz/modules/token/run.md)
- [whoami](https://tools.thehacker.recipes/mimikatz/modules/token/whoami.md)
- [ts](https://tools.thehacker.recipes/mimikatz/modules/ts.md): The Terminal Service module of Mimikatz
- [logonpasswords](https://tools.thehacker.recipes/mimikatz/modules/ts/logonpasswords.md)
- [mstsc](https://tools.thehacker.recipes/mimikatz/modules/ts/mstsc.md)
- [multirdp](https://tools.thehacker.recipes/mimikatz/modules/ts/multirdp.md)
- [remote](https://tools.thehacker.recipes/mimikatz/modules/ts/remote.md)
- [sessions](https://tools.thehacker.recipes/mimikatz/modules/ts/sessions.md)
- [vault](https://tools.thehacker.recipes/mimikatz/modules/vault.md)
- [cred](https://tools.thehacker.recipes/mimikatz/modules/vault/cred.md)
- [list](https://tools.thehacker.recipes/mimikatz/modules/vault/list.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://tools.thehacker.recipes/mimikatz.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.