So it's very late here.
And one thing you don't know is that I recorded my videos at nights I work during the day I spent some
time with my wife and then I find that anywhere from 10:00 to about 3:00 a.m. is the prime time to record
videos because the traffic on my street is insane.
Well I'm telling you all this because I'm a little bit tired and this is going to be my second time
now recording this set of videos on Mimi Katz because I forgot to turn my microphone on.
So forgive me for this but we're going to go through it a second time.
So should be more well polished.
So here we are.
We're talking about Mimi Katz and let's go ahead and just dive right in what is Mimi Katz.
Well Mimi Katz is a tool that we can use to view and steal credentials.
Now it steals these credentials that are stored in memory and it can do a lot of nifty things beyond
stealing credentials.
It can generate Cairo's tickets and it can leverage a lot of attacks.
Just a few attacks.
And that's kind of a joke but credential dumping.
Pass the hash over pass the hash pass the ticket Golden Ticket silver ticket.
Now we're not going to cover all these in this course that starts getting very very deep in here in
a couple of videos.
I'm going to give you resources on where you can go find information on this and how you can get better
and better on some of these things.
But for now my only recommendation is just to cover what I think is important for again for an interview.
And then the more about this that you can learn about these extra attacks that you're seeing here then
the better off you're going to be in your interview but I don't want to overwhelm you with advanced
techniques.
That's going to just possibly leave you confused.
So we're going to keep it with the basics for now and then you can feel free to dive deeper once you
have more comfortability in this topic.
So before we move on I do want to bring up the get hub.
So go ahead and go to the Github page here for me cats and just go ahead and Google get hub.
Mimi Katz and you should be brought here to this.
Now Mimi Katz is made by a gentleman named Benjamin Delpy.
He's out of France.
So Mimi Katz I believe means cute kittens in French or something like that cute cats you might trigger
an unsafe Web site because Windows does not like this most Anna viruses do not like this and this is
made to dump credentials on Windows right.
So there is a cat and mouse game that's going on right now with windows in.
I'm going to show you how to utilize this tool.
We're going to talk about some strategies with it.
And we're going to play around that.
The only caveat that I'm going to say is it's going to work here.
And now for the video by the time that you watch this and you download it there's a possibility that
a patch on Windows might break it.
And then they have to update the patch.
I mean me cat sigh and it's kind of a back and forth game.
But as of right now it's working.
And this is a tool again that is going to get caught.
You can see already unsafe Web site.
If you just download this and upload it to a machine.
Chances are it's going to get picked up.
There are other tools out there that can utilize this one is called invoke Dash.
Mimi Katz is a power shell tool.
Now you can either run that on disk meaning that you can upload that to a computer or you can run that
via what's called i.e. acts which is a way to just download files via a power show and you can download
and execute without ever actually touching the disk.
Those are some advance strategies or just thinking more to the next steps that you might want to start
looking into other strategies to our orchestration and hiding that you're actually running Mimi Katz.
Now again as I said earlier in the course I can show you how to do that and how we do it nowadays.
But it's just going to become outdated.
It's this cat and mouse game and it changes all the time.
So I'd rather show you what the tool can do what it's capable of and let you do this research a little
bit on the outside and learn what more attacks are out there.
Last thing to point out.
So it says here that it is a well-known tool to extract plaintext passwords extracts hashes pin codes
curb rows tickets.
And it does all the attacks we talked about plus a lot more if you scroll down just a little bit.
Come here to this.
I don't want to build it or if you don't want to build it binaries are available because this is in
a SLA and files you'd actually have to compile this.
We're going to go ahead and click this.
If you're on edge it will report it.
So go ahead.
Just disregard this.
And right here we are currently on this 20 19 November 11 November 25th.
So go ahead and just download that.
You may have to download this you at the disable defender if you downlink it directly to your machine
or your antivirus.
My suggestion is to download it directly to your domain controller.
So go ahead and put this on the domain controller.
So from here on out what we're going to assume is we're going to assume that we have compromised the
domain controller and we're going to talk about what we can do once we compromise it why we're doing
that and what some attacks are that we can use for persistence specifically a golden ticket and what
a golden ticket is capable of.
So let's go ahead and meet in the next video we actually explore what we can do with this tool and then
we'll kind of take it from there.