Password dumping with MimiPenguin

The MimiPenguin tool is based on the very popular password-cracking tool called Mimikatz. Much like swap_digger, MimiPenguin can also retrieve artifacts running in memory by dumping memory processes that may contain unencrypted passwords in plaintext, as shown in the following steps:

1. Let’s start by changing to the Desktop folder from our current location, and then clone MimiPenguin to the desktop by typing the following into a new terminal:

   git clone https://github.com/huntergregal/mimipenguin

The following screenshot shows the output of the preceding command when installing MimiPenguin.

Figure 11.12 – Installing MimiPenguin

2. Change to the mimipenguin directory by typing cd mimipenguin and then show the files within by typing ls.

The following screenshot shows the output of the preceding ls command.

Figure 11.13 – Viewing contents of the mimipenguin...