Files
Viper/docs/en/module/CredentialAccess_CredentialDumping_WindowsHashDump.md
2025-04-25 19:54:23 +08:00

13 lines
434 B
Markdown

# Retrieve Windows Memory Hash
This module uses Hashdump to capture hashes from memory and the SAM database.
For Domain Controllers, the time taken for Hashdump is proportional to the number of domain users.
## Operation Method
![](img/CredentialAccess_CredentialDumping_WindowsHashDump/1.webp)
![](img/CredentialAccess_CredentialDumping_WindowsHashDump/2.webp)
![](img/CredentialAccess_CredentialDumping_WindowsHashDump/3.webp)