NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
Mimikatz & Credential Dumping
Master the ultimate Windows credential extraction tool. Learn to bypass AV/EDR, dump LSASS memory, and execute stealthy post-exploitation attacks.
Room tasks
1What is Mimikatz & Credential Dumping
2Mimikatz Setup & Execution
3Extracting Plaintext Passwords & Hashes from LSASS
4Golden Ticket & Silver Ticket Attacks Explained
5Guided Lab: Domain Admin via Mimikatz
Frequently Asked Questions
What is Mimikatz?
Mimikatz is a post-exploitation tool that extracts credentials such as passwords, hashes, and Kerberos tickets from Windows memory. Security professionals use it to show how credential theft works.
What is LSASS and why do attackers target it?
The Local Security Authority Subsystem Service handles authentication on Windows and keeps credential material in memory. Dumping its memory can reveal hashes and sometimes plaintext passwords.
How can defenders reduce Mimikatz risk?
Enable Credential Guard, run LSASS as a protected process, limit admin rights, and monitor suspicious access to LSASS. This free Codelivly room covers the attacks so you can better recognize and block them.