«

»

Aug 15

NinjaCopy – Read Any File On Any System

Want to read any file on any box?*

*Powershell and Admin account required

Take a look at:

http://clymb3r.wordpress.com/2013/06/13/using-powershell-to-copy-ntds-dit-registry-hives-bypass-sacls-dacls-file-locks/

This script is ideal for dropping local SAM files off compromised hosts or dropping the NTDS.dit file off domain controllers.

Basic usage:

PS > .\Invoke-NinjaCopy.ps1 -Path “C:\Windows\System32\config\sam” -LocalDestination “c:\copy_of_local_sam”

Download here:

https://github.com/clymb3r/PowerShell/tree/master/Invoke-NinjaCopy

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>