Want to read any file on any box?*
*Powershell and Admin account required
Take a look at:
This script is ideal for dropping local SAM files off compromised hosts or dropping the NTDS.dit file off domain controllers.
Basic usage:
PS > .\Invoke-NinjaCopy.ps1 -Path “C:\Windows\System32\config\sam” -LocalDestination “c:\copy_of_local_sam”
Download here:
https://github.com/clymb3r/PowerShell/tree/master/Invoke-NinjaCopy