As of release 2.2.0 20200918 Zerologon encrypted
Note: The Standard module functions do not need to be prefaced with
standard::
they can be invoked directly from themimikatz #
prompt.
Here are the functions inside of the standard module:
.#####. mimikatz 2.2.0 (x64) #19041 Sep 18 2020 19:18:29
.## ^ ##. "A La Vie, A L'Amour" - (oe.eo)
## / \ ## /*** Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com )
## \ / ## > https://blog.gentilkiwi.com/mimikatz
'## v ##' Vincent LE TOUX ( vincent.letoux@gmail.com )
'#####' > https://pingcastle.com / https://mysmartlogon.com ***/
mimikatz # standard::
ERROR mimikatz_doLocal ; "(null)" command of "standard" module not found !
Module : standard
Full name : Standard module
Description : Basic commands (does not require module name)
exit - Quit mimikatz
cls - Clear screen (doesn't work with redirections, like PsExec)
answer - Answer to the Ultimate Question of Life, the Universe, and
Everything
coffee - Please, make me a coffee!
sleep - Sleep an amount of milliseconds
log - Log mimikatz input/output to file
base64 - Switch file input/output base64
version - Display some version informations
cd - Change or display current directory
localtime - Displays system local date and time (OJ command)
hostname - Displays system local hostname
Quits mimikatz
Clears the screen, only useful in direct console access
You'll have to run this to find out what the answer to life, the universe and everything is...
The first meal of the day:
mimikatz # coffee
( (
) )
.______.
| |]
\ /
`----'
Sleeps for the specified number of milleseconds.
mimikatz # sleep 1000
Sleep : 1000 ms... End !
mimikatz #
Logs the commands and output from Mimikatz. By default it will log to the file mimikatz.log
in the current working directory of the process where Mimikatz is ran.
mimikatz # log
Using 'mimikatz.log' for logfile : OK
A file and path can be specified to change this default behavior:
mimikatz # log C:\temp\m.log
Using 'C:\temp\m.log' for logfile : OK
Logging can also be stopped using the /stop
flag:
mimikatz # log /stop
Using '(null)' for logfile : OK
Show or changes the state of input or output to Base64.
Default state is bother input and output are false:
mimikatz # base64
isBase64InterceptInput is false
isBase64InterceptOutput is false
Input will instruct Mimkatz that whereever it would normally take a file for input to take a Base64 string instead. This is useful when you are intentionally trying not to write to disk.
Setting input to Base64:
mimikatz # base64 /in:true
isBase64InterceptInput is true
isBase64InterceptOutput is false
Output will take any file write that Mimiaktz is about to do (such as with Certificates or Kerberos tickets) and instead of writing them to the current working directory, they will be written to the console in base64 format.
Setting output to Base64:
mimikatz # base64 /out:true
isBase64InterceptInput is false
isBase64InterceptOutput is true