Mimikaz Crawl Windows plaintext password under WAF

When we get the target server, we usually use artifact Mimkaz to fetch the clear-text password of the target server, but if the target server is configured Waf,mimikaz cannot crawl, it is possible to download the DMP file with account password to local to use Mimikaz crawl.

Realize the same system environment as the target machine. Then use the following command to download the DMP file;

Procdump.exe-accepteula-ma Lsass.exe%computername%_lsass.dmp

This procdump.exe is a tool in the Microsoft Toolkit, will not be anti-virus ban, after the DMP downloaded, using a few two Mimikaz command, you can grab the Windows plaintext password

Mimikatz # Sekurlsa::minidump LSASS. Dmpmimikatz # Sekurlsa::logonpasswords Full

Mimikaz Crawl Windows plaintext password under WAF