MimiPenguin 2.0
#Security Testing#Offensive Security
An exploration of a new method to abuse DCOM for remote payload execution and lateral movement.
A Tool for Extracting Login Passwords from Linux Desktop Users
This tool is designed to extract the login password from the currently logged-in Linux desktop user. It is inspired by the widely-used Windows tool, mimikatz. The tool takes advantage of cleartext credentials stored in memory by dumping the relevant process and extracting lines that are likely to contain passwords. Version 2.0 introduces a clean C port to enhance speed and portability. There is a known issue with the 32-bit version when used in a 64-bit user space. Root permissions are required to operate this tool. It is supported on Kali 4.3.0 (rolling) x64, Ubuntu Desktop 12.04 LTS x64, 14.04.1 LTS x64, and 16.04 LTS x64.
