> For the complete documentation index, see [llms.txt](https://tools.thehacker.recipes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://tools.thehacker.recipes/mimikatz/modules/sekurlsa.md).

# sekurlsa

This modules is probably the most used one among Mimikatz users. It retrieves clear text passwords, kerberos tickets, pin codes, etc (in other words, credentials from several Secure Service Providers) from the LSA's Subsystem Service (LSASS).

This credential dumping technique is covered in The Hacker Recipes: [LSASS credential dumping](https://www.thehacker.recipes/ad/movement/credentials/dumping/lsass).