‫Mimi Katz is absolutely a great host exploitation tool after the initial exploitation phase.
‫Attackers may want to get a firmer foothold on a computer or network.
‫Doing so often requires a set of complementary tools.
‫Mimi Katz is an attempt to bundle together some of the most useful tasks that attackers will want to
‫perform.
‫Fortunately, Metasploit has decided to include Mimi Katz as an interpreter script to allow for easy
‫access to its full set of features without needing to upload any files to the disk of the compromised
‫host.
‫So after obtaining a maturity show, we need to ensure that our session is running with system level
‫privileges for Mimi Cats to function properly, so use get UID to look at the user and if it's not system
‫user, we can use get system to try to gain system privileges.
‫Now, we cannot be MCATs module into the memory.
‫Help me, me, cats to see the memy cats commands.
‫Now, Metasploit provides us with some built in commands that showcase Mimi is most commonly used features
‫dumping hashes and clear text credentials straight from memory.
‫However, the Memory Cards Command option gives us full access to all of the features in Mimic Cats.
‫Those slightly unorthodox, we can get a complete list of the available modules by trying to load a
‫non-existent feature, so type Mimi Cats command F to specify the feature.
‫Now write something meaningless.
‫For example, we'll just X-Y-Z put colon colon at the end and hit enter.
‫Here are the list of the modules we can use and maybe Cat.
‫We can also use mean MCATs commands to extract hashes and clear text credentials from the compromised
‫machine type Mimi cards, command f sam dump and hit enter see the commands of the SAM dump module.
‫Now, let's use the hashes, command and collect all the hashes.
‫To extract the clear tax credentials, we can use this search passwords command of the SEC you URL assay
‫module, this command search is directly intel says memory segments for passwords.
‫So type may MCATs command F as he q or else a search password and hit enter.
‫Now here we have a clear text password.
‫OK, so let's take a little break here and play some minesweeper.
‫Come on.
‫We're not children will play in expert mode, of course.
‫Well, OK, I'll need some help.
‫So back to Cali, we're in the interpreter session and Mimi Carter's loaded to list the modules of the
‫commands again.
‫Type MCATs Command F Q W e colon, colon and hit enter.
‫Now, there's a strange module here when mine.
‫Let's look at its command.
‫So what happens when we use the info command here?
‫Well, I think these stars show the places of the minds, so now we can know where to click.
‫OK, so restart the minesweeper again, and I'll use this cheat command for this time around.
‫Now, turn back to Minesweeper and click anywhere, and you are the new record holder.
‫Well done.