adil
/
DigiSpark-Payloads
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Create README.md

This commit is contained in:
Muhammad Talha Khan 2019-10-05 12:51:51 +05:00 committed by GitHub
parent ef45d4b83c
commit 633a48f410
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
payloads/SAM Dumper/README.md Normal file
View File

@ -0,0 +1,22 @@
# SAM Dumper
### Description:
#### 1: Sam_Dumper.ino:<br>
A small but useful powershell script which works by dumping all the SAM, System, Security files from windows registry and sending them on
remote location. <br>
**Instuctions:**<br>
Before using it make sure the WebHook.site hook is set in SAM_Dumper.ino which you will find in the payload. After you will receive the dumps
they will be base64 encoded you can decode them by saving them in file and using following command in powershell which i have used to encode them.<br>
1. Save Base64 encoded dump into file e.g; SAM.base64.
2. Use certutils to decode the file with following command <br>
**"certutil.exe -decode SAM.base64 SAM.plain"**
3. Do the same with reset of the files and use your favourite LM/NTLM password Cracker to get passwords oPhCrack, Hashcat, Cain&Able etc.
**Tested on:**<br>
**OS**: Windows 10|8|7<br>
**User**: Admin<br>
**Hardware**: ATtiny85 (Chinese)