standard (main module)

Core mimikatz utility commands. These don't require a module prefix — exit works the same as standard::exit.

exit

Close mimikatz, running cleanup routines.

mimikatz # exit
Bye!

cls

Clear the console screen.

mimikatz # cls

Note: doesn't work with remote execution tools like psexec or Meterpreter.

version

Display mimikatz and Windows version information.

mimikatz # version

cd — Change Directory

Change or display current working directory.

mimikatz # cd [<directory>]

Examples

# Display current directory
mimikatz # cd

# Change directory
mimikatz # cd C:\temp

log — Log Output to File

Log all mimikatz output to a file.

mimikatz # log [<filename>] [/stop]

Options

• <filename> — output file (default: mimikatz.log)
• /stop — stop logging

Examples

# Start logging to default file
mimikatz # log

# Log to specific file
mimikatz # log C:\temp\output.log

# Stop logging
mimikatz # log /stop

base64 — Base64 Output Mode

Toggle base64 encoding for file output (useful for in-memory operation — avoids writing files to disk).

mimikatz # base64 [/output:true|false]

Examples

# Enable base64 output
mimikatz # base64

# Combined with ticket export
mimikatz # base64 /output:true
mimikatz # kerberos::list /export

sleep — Sleep

Pause execution for a specified duration.

mimikatz # sleep [<milliseconds>]

Default: 1000ms

mimikatz # sleep 4200
Sleep : 4200 ms... End !

answer

Returns "42" (Douglas Adams reference).

mimikatz # answer
42.

coffee

Displays ASCII art of a coffee cup.

mimikatz # coffee

Notes

• standard::base64 /output:true combined with kerberos::list /export or sekurlsa::tickets /export outputs tickets as base64 blobs instead of writing .kirbi files — useful for in-memory-only operations
• Combine log with attack sequences to capture all output for reporting