Quarks PwDump
blog.quarkslab.com | research | #windows | #ntlm | #tooling | #pentest | #password-dumping | #bitlocker
Summary
Quarks PwDump: a Win32 tool dumping local and domain NT/LM hashes, cached domain credentials and NTDS.dit's BitLocker recovery data via JET/ESE APIs to avoid libesedb crashes; admin rights needed.
- Published
- Collected
Skip to content