{"id":2222,"date":"2021-01-09T17:51:35","date_gmt":"2021-01-09T16:51:35","guid":{"rendered":"https:\/\/andreas-klingler.de\/infosec\/?p=2222"},"modified":"2023-12-20T21:33:23","modified_gmt":"2023-12-20T20:33:23","slug":"windows-post-exploitation","status":"publish","type":"post","link":"https:\/\/infosec.andreas-klingler.de\/?p=2222","title":{"rendered":"Windows post exploitation"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Grab the <span class=\"caps\">SAM<\/span> and sys\u00adtem&nbsp;file:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">%windir%\\repair\\sam\n%windir%\\System32\\config\\RegBack\\SAM\n%windir%\\system32\\config\\SAM\n%windir%\\repair\\system\n%windir%\\System32\\config\\RegBack\\system\n%windir%\\system32\\config\\system<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/andreas-klingler.de\/infosec\/?p=2195\">(Re-) Run the cre\u00adden\u00adtial retriev\u00aders from the script page.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Grab the <span class=\"caps\">SAM<\/span> and sys\u00adtem&nbsp;file: %windir%\\repair\\sam %windir%\\System32\\config\\RegBack\\<span class=\"caps\">SAM<\/span> %windir%\\system32\\config\\<span class=\"caps\">SAM<\/span> %windir%\\repair\\system %windir%\\System32\\config\\RegBack\\system %windir%\\system32\\config\\system (Re-) Run the cre\u00adden\u00adtial retriev\u00aders from the script page.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[472],"tags":[207,24],"class_list":["post-2222","post","type-post","status-publish","format-standard","hentry","category-postexp","tag-post-exploitation","tag-windows"],"_links":{"self":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2222","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2222"}],"version-history":[{"count":3,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2222\/revisions"}],"predecessor-version":[{"id":2266,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2222\/revisions\/2266"}],"wp:attachment":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2222"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2222"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}