Mimi Katz is absolutely a great host exploitation tool after the initial exploitation phase, the Packers
may want to get a firmer foothold on a computer or network doing so often requires a set of complementary
tools.
Mimi Katz is an attempt to bundle together some of the most useful tasks that attackers will want to
perform.
Fortunately, Métis Boyd has decided to include Mimi Katz as an interpreter script to allow for easy
access to its full set of features without needing to upload any files to the disk of the compromised
host.
So after obtaining a metaphor to show we need to ensure that our session is running with system level
privileges for Mimi Katz to function properly, so you get UID to look at the user, and if it's not
system user, we can use get system to try to gain system privileges.
Now we can be maquettes module into the memory.
Help me get to see the Mimecast commands.
Now, Métis Boyd provides us with some built-In commands that showcase Maemi, Gazza's most commonly
used features dumping hashes and clear text credentials straight from memory.
However, that maybe Cat's command option gives us full access to all of the features in Mimecast.
Though slightly unorthodox, we can get a complete list of the available modules by trying to load a
non-existent feature, so type Mimecast command F to specify the feature.
Now write something meaningless.
For example, just X, Y, Z, put colon, colon at the end and hit enter.
Here are the list of the modules we can use in Mimecast.
We can also use memory cards commands to extract hashes and clear text credentials from the compromised
machine type Mimi Katz, command f sam dump and hit ETAs.
See the commands of the SAM module.
Now, let's use the hashas command and collect all the hashes.
To extract the clear text credentials, we can use this search password's command of the SEC You Earl
essay module.
This command search is directly in Alsace memory segments for Password's so type Meimi Cats' Command
F as he KUAR else a search password and hit enter.
Now here we have a clear text password.
OK, so let's take a little break here and play some minesweeper.
Come on, we're not children will play in expert mode, of course.
Well, OK, I'll need some help.
So back to Cali.
We're in the maturity session and Mimecast is loaded to list the modules of the commands again.
Type Mimecast Cat Command F Q w e colon colon and it enter.
Now, there's a strange module here when mine, let's look at its commands.
So what happens when we use the info command here?
Well, I think these stars show the places of the mines, so now we can know where to click.
OK, so restart the minesweeper again and I'll use this cheat command for this time around.
Now turn back to Minesweeper and click anywhere, and you are the new record holder.
Well done.