Skip to content

dottorvenom/noMimikatz

Repository files navigation

noMimikatz

This is a simple client (post exploitation) to send IRP to the mimidrv.sys driver without using mimikatz.

The mimidrv.sys driver is integrated. Administrator rights are required to install it (post exploitation)

alt text

We can choose between invoking the BSOD functionality (IRP Code 0x002) or assigning the token to each open cmd.exe and powershell.exe process System (IRP Code 0x011).

alt text

You can integrate other IRP code by referring to ''' https://github.com/gentilkiwi/mimikatz/blob/master/mimidrv/ioctl.h '''

Example of token assigned to the cmd.exe process

alt text alt text

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages