Auto start Wdigest Auth,Lock Screen,Detect User Logon and get clear password.
Base on:
https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Invoke-Mimikatz.ps1
Author: 3gstudent
PowerShell.exe -ExecutionPolicy Bypass -File dump.ps1
- Set the regedit value to 1 and start Wdigest Auth
- Auto Lock Screen
- Auto Detect User Logon
- Auto Get clear-text password and save
Details：
《域渗透——Dump Clear-Text Password after KB2871997 installed》