> For the complete documentation index, see [llms.txt](https://pentest.mxhx.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentest.mxhx.org/07-win-privesc/ntds.md).

# NTDS

```
VSS
Lets you copy the ntds.dit

AD Passwords
\systemroot%\ntds\ntds.dit  
50 MB Database
Extract with:
https://github.com/csababarta/ntdsxtract
```

## Get more.....