Password dumping with mimipenguin

Mimipenguin is based on the very popular password-cracking tool mimikatz. Much like swap_digger, mimipenguin can also retrieve artifacts running in memory by dumping memory processes that may contain unencrypted passwords in plaintext:

1. Let's start by changing to the Desktop folder and then cloning mimipenguin to desktop by typing git clone into a new Terminal:

   Figure 8.36 – Cloning mimipenguin onto the Kali Desktop

2. Change to the mimipenguin directory by typing in cd mimipenguin, then show the files within by typing in ls:

   Figure 8.37 – Viewing the contents of the mimipenguin folder

3. Run mimipenguin by typing in ./mimipenguin:

Figure 8.38 – Password discovery using mimipenguin in Kali Linux

In the previous screenshot, we can see that the username and password for the Kali machine was discovered (root : toor).