pwdump

S0006

Tool.View on attack.mitre.org

About this tool

pwdump is a credential dumper.

Techniques used1

Procedure examples1

TechniqueProcedure example
T1003.002
Security Account Manager

pwdump can be used to dump credentials from the SAM.

Groups that use it6

Campaigns0

None recorded.

References1

  1. Wikipedia pwdump Open source
    Wikipedia. (2007, August 9). pwdump. Retrieved June 22, 2016.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.