Looking for a plugi...
 
Notifications
Clear all

Looking for a plugin's Volatility

5 Posts
3 Users
0 Reactions
783 Views
(@aquachimere)
Eminent Member
Joined: 7 years ago
Posts: 32
Topic starter  

Hi everybody

I'am looking for this plugin "logon"

With it, it is possible to find the windows session password using the Wdigest.dll

the url from this post is down

https://articles.forensicfocus.com/2014/04/28/windows-logon-password-get-windows-logon-password-using-wdigest-in-memory-dump/

anybody knows where i can found it?

regards


   
Quote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

I'am looking for this plugin "logon"

I checked the Volatility command reference, and searched for "logon"…I found 5 instances in the page, none of which referred to plugin.

It may be the case that there is no "logon" plugin in Volatility.


   
ReplyQuote
(@aquachimere)
Eminent Member
Joined: 7 years ago
Posts: 32
Topic starter  

Exactly, I think we have to put it inside plugins folder' volatility.

but i cannot find the plugin logon.py

https://withgit.com/For-MD/volatility-plugin-logon/blob/master/logon.py


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

Looks like you found it.


   
ReplyQuote
(@randomaccess)
Reputable Member
Joined: 14 years ago
Posts: 385
 

Does the mimikatz plugin get you what you need?


   
ReplyQuote
Share: