Metasploit offers Mimikatz and Kiwi extensions to perform various types of credential-oriented operations, such as dumping passwords and hashes, dumping passwords in memory, generating golden tickets, and much more. Let's load kiwi in Metasploit as follows:
Once we have loaded the kiwi module, we can see that we have an entire menu of commands we can use, as shown in the following screenshot:
Let's try running lsa_dump_secrets commands, and check if we can dump something or not:
Bingo! We can see that we have successfully ...