Skip to content

Commit 3e3e81f

Browse files
committed
Update documentation with new datastore options
1 parent 67c33fa commit 3e3e81f

File tree

1 file changed

+13
-1
lines changed

1 file changed

+13
-1
lines changed

documentation/modules/auxiliary/gather/windows_secrets_dump.md

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ Solino.
2727
### Setup
2828
A privileged user is required to run this module, typically a local or domain
2929
Administrator. It has been tested against multiple Windows versions, from
30-
Windows XP/Server 2003 to Windows 10/Server version 2004.
30+
Windows XP/Server 2003 to Windows 10/Server version 2022.
3131

3232
## Verification Steps
3333
1. Start msfconsole
@@ -53,6 +53,18 @@ Windows XP/Server 2003 to Windows 10/Server version 2004.
5353
Use inline technique to read protected keys from the registry remotely without
5454
saving the hives to disk (default: true).
5555

56+
### KRB_USERS
57+
Restrict retrieving domain information to the users or groups specified. This
58+
is a comma-separated list of Active Directory groups and users. This parameter
59+
is only utilised for domain replication (`action` set to `DOMAIN` or `ALL`).
60+
`set KRB_USERS "user1,user2,Domain Admins"
61+
62+
### KRB_TYPES
63+
Restrict retrieving domain information to a specific type of account; either
64+
`USERS_ONLY` or `COMPUTERS_ONLY`, or `ALL` to retrieve all accounts. This
65+
parameter is only utilised for domain replication (`action` set to `DOMAIN` or
66+
`ALL`). It is ignored if `KRB_USERS` is also set.
67+
5668
## Actions
5769

5870
### ALL

0 commit comments

Comments
 (0)