The Hacker Tools
  • Introduction
  • Mimikatz 🥝
    • General 🛠️
    • Modules
      • crypto
        • capi
        • certificates
        • certtohw
        • cng
        • extract
        • hash
        • keys
        • kutil 🛠️
        • providers
        • sc
        • scauth 🛠️
        • stores
        • system
        • tpminfo
      • dpapi
        • blob
        • cache
        • capi
        • chrome
        • cloudapkd 🛠️
        • cloudapreg
        • cng
        • create 🛠️
        • cred
        • credhist
        • luna
        • masterkey
        • protect
        • ps
        • rdg
        • sccm
        • ssh
        • tpm
        • vault
        • wifi
        • wwan
      • event
        • clear
        • drop
      • kerberos
        • ask
        • clist
        • golden
        • hash
        • list
        • ptc
        • ptt
        • purge
        • tgt
      • lsadump
        • backupkeys
        • cache
        • changentlm
        • dcshadow
        • dcsync
        • mbc
        • netsync
        • lsa
        • packages
        • postzerologon
        • rpdata
        • sam
        • secrets
        • setntlm
        • trust
        • zerologon
      • misc
        • aadcookie
        • clip
        • compress
        • cmd
        • detours
        • easyntlmchall
        • efs
        • lock
        • memssp
        • mflt
        • ncroutemon
        • ngcsign
        • printnightmare
        • regedit
        • sccm
        • shadowcopies
        • skeleton
        • spooler
        • taskmgr
        • wp
        • xor
      • net
        • alias
        • deleg
        • group
        • if
        • serverinfo
        • session
        • share
        • stats
        • tod
        • trust
        • user
        • wsession
      • privilege
        • backup
        • debug
        • driver
        • id
        • name
        • restore
        • security
        • sysenv
        • tcb
      • process
        • exports
        • imports
        • list
        • resume
        • run
        • runp
        • start
        • stop
        • suspend
      • rpc
        • close
        • connect
        • enum
        • server
      • sekurlsa
        • backupkeys
        • bootkey
        • cloudap
        • credman
        • dpapi
        • dpapisystem
        • ekeys
        • kerberos
        • krbtgt
        • livessp
        • logonpasswords
        • minidump
        • msv
        • process
        • pth
        • ssp
        • tickets
        • trust
        • tspkg
        • wdigest
      • service
        • -
        • +
        • preshutdown
        • remove
        • resume
        • shutdown
        • start
        • stop
        • suspend
      • sid
        • add
        • clear
        • lookup
        • modify
        • patch
        • query
      • standard
        • answer
        • base64
        • cd
        • cls
        • coffee
        • exit
        • hostname
        • localtime
        • log
        • sleep
        • version
      • token
        • elevate
        • list
        • revert
        • run
        • whoami
      • ts
        • logonpasswords
        • mstsc
        • multirdp
        • remote
        • sessions
      • vault
        • cred
        • list
  • 🛠️Impacket
    • Library
      • SMB
      • LDAP
      • MSRPC
      • NTLM
      • Kerberos
    • Script examples
      • addcomputer.py
      • atexec.py
      • dcomexec.py
      • dpapi.py
      • esentutl.py
      • exchanger.py
      • findDelegation.py
      • GetADUsers.py
      • getArch.py
      • Get-GPPPassword.py
      • GetNPUsers.py
      • getPac.py
      • getST.py
      • getTGT.py
      • GetUserSPNs.py
      • goldenPac.py
      • karmaSMB.py
      • kintercept.py
      • lookupsid.py
      • mimikatz.py
      • mqtt_check.py
      • mssqlclient.py
      • mssqlinstance.py
      • netview.py
      • nmapAnswerMachine.py
      • ntfs-read.py
      • ntlmrelayx.py
      • ping.py
      • ping6.py
      • psexec.py
      • raiseChild.py
      • rdp_check.py
      • reg.py
      • registry-read.py
      • rpcdump.py
      • rpcmap.py
      • sambaPipe.py
      • samrdump.py
      • secretsdump.py
      • services.py
      • smbclient.py
      • smbexec.py
      • smbpasswd.py
      • smbrelayx.py
      • smbserver.py
      • sniff.py
      • sniffer.py
      • split.py
      • ticketConverter.py
      • ticketer.py
      • wmiexec.py
      • wmipersist.py
      • wmiquery.py
  • CrackMapExec
  • BloodHound
  • Rubeus
  • Exegol
  • PowerSploit
  • Hashcat
    • for Active Directory
    • Official docs
Powered by GitBook
On this page
  1. Mimikatz 🥝
  2. Modules
  3. standard

base64

standard::base64 or base64 switches file input/output to base64. It has the following command line arguments:

  • /in: True or False for base64 input. It can be used with dpapi::blob /in:<base64_input>

  • /out: True or False. Kerberos tickets can be exported to based64 and passed to other tools like Rubeus.

mimikatz # base64 /out:true
iSBaSE64InTeRcePTInPut  is false
iSBaSE64INteRcePToUtput is true
mimikatz # kerberos::list /export

[00000000] - 0x00000012 - aes256_hmac
   Start/End/MaxRenew: 13/10/2021 20:58:08 ; 14/10/2021 06:58:08 ; 20/10/2021 20:58:08
   Server Name       : krbtgt/HACKLAB.LOCAL @ HACKLAB.LOCAL
   Client Name       : m3g9tr0n @ HACKLAB.LOCAL
   Flags 40e10000    : name_canonicalize ; pre_authent ; initial ; renewable ; forwardable ;
====================
Base64 of file : 0-40e10000-m3g9tr0n@krbtgt~HACKLAB.LOCAL-HACKLAB.LOCAL.kirbi
====================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...Output Omitted...
mimikatz # base64 /out:false
iSBaSE64InTeRcePTInPut  is false
iSBaSE64INteRcePToUtput is false
PreviousanswerNextcd

Last updated 3 years ago