MITRE ATT&CK / Software / S0008

gsecdump

ID: S0008
Type: Tool
Platforms: Windows
Source: attack.mitre.org
MITRE last modified: 18 Nov 2024

gsecdump is a publicly-available credential dumper used to obtain password hashes and LSA secrets from Windows operating systems. ^[1]

Techniques used (2)

Groups using it (5)

References

TrueSec Gsecdump