havoc-gosecdump

KO | EN

gitlite — search

#javascript #ai #typescript #llm #go #rust #macos #java #awesome #vue #security #ios #openai #open-source

(★ 18)

No description available.

havoc-gosecdump Latest Version Download

// repository documentation

★ 0 (0 ratings)

# havoc-gosecdump

>This module will upload the gosecdump binary to a temporary folder under windows  (it's better to use AppData or ProgramData)

# Usage

Go to `Attack > Extensions ` and select havoc-gosecdump + install

you now have a new gosecdump command available

to use it, here are the parameters to pass: `gosecdump <target_ip> <user> <password> <sam/lsa/dcc2>`

![demo nt](https://raw.githubusercontent.com/matro7sh/havoc-gosecdump/main/img/poc.png)

![demo lsa](https://raw.githubusercontent.com/matro7sh/havoc-gosecdump/main/img/lsa.png)

![demo dcc2](https://raw.githubusercontent.com/matro7sh/havoc-gosecdump/main/img/poc.png)

It can be used in 127.0.0.1 but it is more intended to dumper the SAM/LSA/DCC2 on a remote machine that our compromised machine can reach.

This binary bypasses EDR-type solutions

### Other options :

you can upload the binary yourself and run it with the `shell` command, but this will create a new process.

the other option is to use the “noconsolation” mode - don't drop the binary on the target