RSSAmplifier

Jett's blog · Apr 18, 2022

dctf 2022 Problem Secure Creds Writeup

0
Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

The problem link to the problem(requires login) Solution First, download the zip file, and unzip it. You should see the file lsass.DMP To check the filedump type, use the file command: file lsass.DMP output: lsass.DMP: Mini DuMP crash report, 16 streams, Sat Apr 9 02:47:27 2022, 0x421826 type After a google search, the term lsass stands for “Local Security Authority Server Service,”…

The problem link to the problem(requires login) Solution First, download the zip file, and unzip it. You should see the file lsass.DMP To check the filedump type, use the file command: file lsass.DMP output: lsass.DMP: Mini DuMP crash report, 16 streams, Sat Apr 9 02:47:27 2022, 0x421826 type After a google search, the term lsass stands for “Local Security Authority Server Service,” and after searching the keywords “lsass minidump” together, you would encounter a tool called Mimikatz

Read on /posts/secure-creds/

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.