GitBook: [master] one page modified

This commit is contained in:
CPol 2021-02-13 09:14:33 +00:00 committed by gitbook-bot
parent 9f5faf7455
commit 26a766ebcd
No known key found for this signature in database
GPG key ID: 07D2180C7B12D0FF

View file

@ -886,7 +886,8 @@ You can **extract many DPAPI masterkeys** from memory with the Mimikatz `sekurls
### AppCmd.exe
**AppCmd.exe** is located in the `%systemroot%\system32\inetsrv\` directory.
**Note that to recover passwords from AppCmd.exe you need to be Administrator and run under a High Integrity level.
AppCmd.exe** is located in the `%systemroot%\system32\inetsrv\` directory.
If this file exists then it is possible that some **credentials** have been configured and can be **recovered**.
This code was extracted from _**PowerUP**_: