MITRE ATT&CKsoftware (tool)

S0008 gsecdump

Published 2017-05-31 Modified 2024-11-17 Official page ↗

Domain: enterprise
Platforms: Windows
Version: 1.2
Created: 2017-05-31

Description

gsecdump is a publicly-available credential dumper used to obtain password hashes and LSA secrets from Windows operating systems.

Related

Uses · MITRE ATT&CK (2)

T1003.004 LSA Secrets sub-technique
T1003.002 Security Account Manager sub-technique

Referenced by MITRE ATT&CK · uses (6)

C0002 Night Dragon campaign
G0131 Tonto Team group
G0060 BRONZE BUTLER group
G0006 APT1 group
G0011 PittyTiger group
G0027 Threat Group-3390 group

References

https://web.archive.org/web/20140328102838/https://www.truesec.se/sakerhet/verktyg/saakerhet/gsecdump_v2.0b5 TrueSec Gsecdump