rpdata

lsadump::RpData can retrieve private data (at the time of writing, Nov 1st 2021, we have no idea what this does or refers to 🤷‍♂️). It has the following command line arguments:

  • /export

  • /secret

  • /name

  • /system

This command requires elevated privileges (by previously running privilege::debug or by executing Mimikatz as the NT-AUTHORITY\SYSTEM account).

mimikatz # lsadump::RpData
PreviouspostzerologonNextsam

Last updated