Looking for a plugi...
 
Notifications
Clear all

Looking for a plugin's Volatility

5 Posts
3 Users
0 Reactions
1,084 Views
(@aquachimere)
Eminent Member
Joined: 8 years ago
Posts: 32
Topic starter   [#16995]

Hi everybody

I'am looking for this plugin "logon"

With it, it is possible to find the windows session password using the Wdigest.dll

the url from this post is down

https://articles.forensicfocus.com/2014/04/28/windows-logon-password-get-windows-logon-password-using-wdigest-in-memory-dump/

anybody knows where i can found it?

regards



   
Quote
keydet89
(@keydet89)
Famed Member
Joined: 22 years ago
Posts: 3568
 

I'am looking for this plugin "logon"

I checked the Volatility command reference, and searched for "logon"…I found 5 instances in the page, none of which referred to plugin.

It may be the case that there is no "logon" plugin in Volatility.



   
ReplyQuote
(@aquachimere)
Eminent Member
Joined: 8 years ago
Posts: 32
Topic starter  

Exactly, I think we have to put it inside plugins folder' volatility.

but i cannot find the plugin logon.py

https://withgit.com/For-MD/volatility-plugin-logon/blob/master/logon.py



   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 22 years ago
Posts: 3568
 

Looks like you found it.



   
ReplyQuote
(@randomaccess)
Reputable Member
Joined: 15 years ago
Posts: 385
 

Does the mimikatz plugin get you what you need?



   
ReplyQuote
Share: