‫Mimi Katz is absolutely a great host exploitation tool after the initial exploitation phase, attackers
‫may want to get a firmer foothold on a computer or network doing so often requires a set of complementary
‫tools.
‫Mimi Katz is an attempt to bundle together some of the most useful tasks that attackers will want to
‫perform.
‫Fortunately, Métis Boyd has decided to include Mimi Katz as an interpreter script to allow for easy
‫access to its full set of features without needing to upload any files to the disk of the compromised
‫host.
‫So after obtaining a metaphor to show we need to ensure that our session is running with system level
‫privileges for Mimi Katz to function properly, so you get UID to look at the user, and if it's not
‫system user, we can use get system to try to gain system privileges.
‫Now, we cannot be McAtee module into the memory.
‫Help me get to see the Mimecast commands.
‫Now, Métis Boyd provides us with some built-In commands that showcase Maemi, Gazza's most commonly
‫used features, dumping hashes and clear text credentials straight from memory.
‫However, that maybe Cat's command option gives us full access to all of the features in Mimecast.
‫Those slightly unorthodox, we can get a complete list of the available modules by trying to load a
‫non-existent feature, so type memy command F to specify the feature.
‫Now write something meaningless.
‫For example, just X, Y, Z, put colon, colon at the end and hit enter.
‫Here are the list of the modules we can use and mimic at.
‫We can also use Mimi Katz commands to extract hashes and clear text credentials from the compromised
‫machine type Mimecast Command F Sam Dump and hit ETAs.
‫See the commands of the SAM module.
‫Now let's use the hashes command and collect all the hashes.
‫To extract the clear text credentials, we can use the search password's command of the SEC you Earl
‫assay module.
‫This command search is directly in Alsace memory segments for password's so type Meimi Cats' Command
‫F as he KUAR else a search password and hit enter.
‫Now here we have a clear text password.
‫OK, so let's take a little break here and play some minesweeper.
‫Come on, we're not children will play in expert mode, of course.
‫Well, OK, I'll need some help.
‫So back to Cali.
‫We're in the interpreter session and Mimecast is loaded to list the modules of the commands again.
‫Type memy cat commands f q w e colon, colon and hit enter.
‫Now, there's a strange module here when mine, let's look at its commands.
‫So what happens when we use the info command here?
‫Well, I think these stars show the places of the mines, so now we can know where to click.
‫OK, so restart the minesweeper again and I'll use this cheat command for this time around.
‫Now turn back to Minesweeper and click anywhere, and you are the new record holder.
‫Well done.