Offline usage of lsassy about lsassy

[mpgn]

Hello,

I'm not the creator of lsassy but here is my two cents: Just use pypykatz if you want to read a lsass dump offline on linux.

lsassy is the exact opposite of "offline dump" and aims to solve problem described below :

downloading an lsass dump on a subnet of 200 machines would lead to downloading dozens of gigabytes. On the first hand it will take a long time, especially for remote machines around the globe, in other countries, and on the other hand abnormal network flow could be detected by the security teams.

More info => https://en.hackndo.com/remote-lsass-dump-passwords/

[Hach0u]

Thanks @mpgn , I should read more carefully ;-)