Drop the MSCache skip from the --dpapi LSA pass

This commit is contained in:
mpgn committed 2026-10-27 16:57:21 +01:00
1 parent 74e9fe27ed
commit b7565a2cbf
1 file changed
+2 -4
+2 -4
View File
@@ -2416,10 +2416,8 @@ class smb(connection):
if not quiet:
self.logger.display("Dumping LSA secrets")
self.output_filename = self.output_file_template.format(output_folder="lsa")
if not quiet:
# The DPAPI pass only needs DPAPI_SYSTEM: skip the cached domain logons (MSCache), each one costs remote registry reads
LSA.dumpCachedHashes()
LSA.exportCached(self.output_filename)
LSA.dumpCachedHashes()
LSA.exportCached(self.output_filename)
LSA.dumpSecrets()
LSA.exportSecrets(self.output_filename)
if not quiet: