Exam GPEN All QuestionsBrowse all questions from this exam
Question 24

You have compromised a Windows workstation using Metasploit and have injected the Meterpreter payload into the smss process. You want to dump the SAM database of the remote system so you can crack it offline. Which Meterpreter module would you need to load in addition to the defaults so that you can accomplish this?

    Correct Answer: D

    To dump the SAM database on a compromised Windows system using Meterpreter, the 'hashdump' module is the correct one to use. 'Hashdump' is specifically designed to extract password hashes from the Security Account Manager (SAM) database, allowing you to crack the passwords offline. The other options (Core, Priv, and Stdapi) do not specifically perform the function of extracting SAM database hashes.

Discussion
Code17Option: D

It's D

Odenkyem

How valid is this dump?, Can someone confirm