Several ways to export the Hash list of the domain controller on the intranet

  

Because the domain controller is generally set up strictly, similar remote execution tools are often not successful when executing commands, and will prompt errors like not write memory. At the time, we have to use other methods to get the Hash.

1. Use psexec similar remote execution tool, directly grab remote hash 2.copy C:\\WINDOWS\ epair3.regedit \\\\ip /ed:\\aa.reg /S "HKEY_LOCAL_MACHINE\\SAM\\SAM\\ Domains\\Account\\Users" 4. Use the windows system, the Gui interface mode, remotely operate the registry. 5. Remote Management Tool DameWare Mini Remote Control

Copyright © Windows knowledge All Rights Reserved