Credential Dumping (LSASS/SAM/NTDS)

advanced Hands-on lab 55 min 3 tasksSubscription

Harvest secrets from the local SAM, live LSASS memory, and the domain's NTDS.dit using secretsdump and mimikatz to recover NTLM hashes and plaintext credentials.

This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.

Part of these paths

Active Directory Attacker

Unlock this lab

Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.

Create free account Sign in to start

Updated 2026-06-06