Credentials Harvesting

Walkthrough summary

Credentials Harvesting TryHackMe walkthrough with 14 answered prompts and lab methodology notes.

Sample prompts covered

• Using the "reg query" command, search for the value of the "flag" keyword in the Windows registry?
  Open the walkthrough page to inspect the full answer and command flow.
• Enumerate the AD environment we provided. What is the password of the victim user found in the description section?
  Open the walkthrough page to inspect the full answer and command flow.
• Follow the technique discussed in this task to dump the content of the SAM database file. What is the NTLM hash for the Administrator account?
  Open the walkthrough page to inspect the full answer and command flow.
• Is the LSA protection enabled? (Y|N)
  Open the walkthrough page to inspect the full answer and command flow.
• Apply the technique for extracting clear-text passwords from Windows Credential Manager. What is the password of the THMuser for internal-app.thm.red?
  Open the walkthrough page to inspect the full answer and command flow.