The Hacker Tools

Introduction
Mimikatz 🥝
- General 🛠️
- Modules
  crypto
  capi
  certificates
  certtohw
  cng
  extract
  hash
  keys
  kutil 🛠️
  providers
  sc
  scauth 🛠️
  stores
  system
  tpminfo
  dpapi
  blob
  cache
  capi
  chrome
  cloudapkd 🛠️
  cloudapreg
  cng
  create 🛠️
  cred
  credhist
  luna
  masterkey
  protect
  ps
  rdg
  sccm
  ssh
  tpm
  vault
  wifi
  wwan
  event
  clear
  drop
  kerberos
  ask
  clist
  golden
  hash
  list
  ptc
  ptt
  purge
  tgt
  lsadump
  backupkeys
  cache
  changentlm
  dcshadow
  dcsync
  mbc
  netsync
  lsa
  packages
  postzerologon
  rpdata
  sam
  secrets
  setntlm
  trust
  zerologon
  misc
  aadcookie
  clip
  compress
  cmd
  detours
  easyntlmchall
  efs
  lock
  memssp
  mflt
  ncroutemon
  ngcsign
  printnightmare
  regedit
  sccm
  shadowcopies
  skeleton
  spooler
  taskmgr
  wp
  xor
  net
  alias
  deleg
  group
  if
  serverinfo
  session
  share
  stats
  tod
  trust
  user
  wsession
  privilege
  backup
  debug
  driver
  id
  name
  restore
  security
  sysenv
  tcb
  process
  exports
  imports
  list
  resume
  run
  runp
  start
  stop
  suspend
  rpc
  close
  connect
  enum
  server
  sekurlsa
  backupkeys
  bootkey
  cloudap
  credman
  dpapi
  dpapisystem
  ekeys
  kerberos
  krbtgt
  livessp
  logonpasswords
  minidump
  msv
  process
  pth
  ssp
  tickets
  trust
  tspkg
  wdigest
  service
  -
  +
  preshutdown
  remove
  resume
  shutdown
  start
  stop
  suspend
  sid
  add
  clear
  lookup
  modify
  patch
  query
  standard
  answer
  base64
  cd
  cls
  coffee
  exit
  hostname
  localtime
  log
  sleep
  version
  token
  elevate
  list
  revert
  run
  whoami
  ts
  logonpasswords
  mstsc
  multirdp
  remote
  sessions
  vault
  cred
  list
🛠️Impacket
- Library
  SMB
  LDAP
  MSRPC
  NTLM
  Kerberos
- Script examples
  addcomputer.py
  atexec.py
  dcomexec.py
  dpapi.py
  esentutl.py
  exchanger.py
  findDelegation.py
  GetADUsers.py
  getArch.py
  Get-GPPPassword.py
  GetNPUsers.py
  getPac.py
  getST.py
  getTGT.py
  GetUserSPNs.py
  goldenPac.py
  karmaSMB.py
  kintercept.py
  lookupsid.py
  mimikatz.py
  mqtt_check.py
  mssqlclient.py
  mssqlinstance.py
  netview.py
  nmapAnswerMachine.py
  ntfs-read.py
  ntlmrelayx.py
  ping.py
  ping6.py
  psexec.py
  raiseChild.py
  rdp_check.py
  reg.py
  registry-read.py
  rpcdump.py
  rpcmap.py
  sambaPipe.py
  samrdump.py
  secretsdump.py
  services.py
  smbclient.py
  smbexec.py
  smbpasswd.py
  smbrelayx.py
  smbserver.py
  sniff.py
  sniffer.py
  split.py
  ticketConverter.py
  ticketer.py
  wmiexec.py
  wmipersist.py
  wmiquery.py
CrackMapExec
BloodHound
Rubeus
Exegol
PowerSploit
Hashcat
- for Active Directory
- Official docs

Powered by GitBook

On this page

rdg

Previousps Nextsccm

Last updated 2 years ago

dpapi::rdg decrypts Remote Desktop Gateway saved passwords. It has the following command line argument:

/rdg: the .rdg file
/password: the password to use to decrypt the rdg file
/masterkey: the masterkey to use for decryption. It can be obtained through sekurlsa::dpapi.
/unprotect: display the decryption results on screen