# Mimikatz & Credential Dumping

> Master the ultimate Windows credential extraction tool. Learn to bypass AV/EDR, dump LSASS memory, and execute stealthy post-exploitation attacks.

Canonical: https://codelivly.com/rooms/mimikatz-credential-dumping
Last updated: 2026-07-20

| | |
|---|---|
| Level | Advanced |
| Category | Cybersecurity |
| Lessons | 5 |
| Estimated time | 30 min |
| XP | 200 |

Amateurs download mimikatz.exe, double-click it, and watch Windows Defender instantly quarantine it. They assume the environment is "too secure" and give up. Professionals know that Mimikatz is the most signatured binary in existence, and running it on disk is a death sentence for an engagement.

To wield it effectively, you must master AMSI bypasses, in-memory execution, reflective loading, and the critical privilege requirements needed to read protected process memory. In this advanced module, we will build a professional Mimikatz execution pipeline. You will learn to bypass modern EDR defenses, evade AMSI, acquire SeDebugPrivilege, and extract credentials entirely in memory without ever touching the disk. This is the definitive guide to Windows credential dumping and lateral movement.

## Lessons

1. What is Mimikatz & Credential Dumping (30 min)
2. Mimikatz Setup & Execution (30 min)
3. Extracting Plaintext Passwords & Hashes from LSASS (30 min)
4. Golden Ticket & Silver Ticket Attacks Explained (30 min)
5. Guided Lab: Domain Admin via Mimikatz (30 min)

## Related

- [Learning path: Active Directory Attacks](https://codelivly.com/learning-paths/active-directory-attacks)
- [All rooms](https://codelivly.com/rooms)