Windows Credentials Editor (WCE) v1.3beta allows you to: NTLM authentication: * List logon sessions and add, change, list and delete associated credentials (e.g.: LM/NT hashes) * Perform pass-the-hash on Windows natively * Obtain NT/LM hashes from memory (from interactive logons, services, remote desktop connections, etc.) which can be used to authenticate to other systems. WCE can perform this task without injecting code, just by reading and decrypting information stored in Windows internal memory structures. It also has the capability to automatically switch to code injection when the aforementioned method cannot be performed.
sudo apt install wce (940 KB)
Dependências: kali-defaults
Escolha um comando ao lado para ver a descrição e a ajuda completa.
wce
root@kali:~# wce -h
> wce ~ Windows Credentials Editor
/usr/share/windows-resources/wce
|-- README
|-- getlsasrvaddr.exe
|-- wce-universal.exe
|-- wce32.exe
`-- wce64.exe