Dumping WDigest Creds with Meterpreter Mimikatz/Kiwi in Windows 8.1

The report explains how Windows' WDigest provider historically stored clear-text logon credentials and how tools like mimikatz/kiwi can extract those credentials by enabling the UseLogonCredential registry DWORD. It covers Microsoft’s Windows 8.1 change and KB2871997 backport, notes differing default registry values across versions, and demonstrates changing the registry and forcing a user re-login to retrieve clear-text passwords from LSA memory.