Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow
LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems, browsers, and applications. It functions as a security utility for retrieving stored credentials from compromised systems during penetration testing. The tool provides capabilities for decrypting domain credentials and extracting sensitive data from system storage, including memory dumps, credential managers, keychains, and password hashes. It recovers stored passwords from common software by accessing plaintext files, APIs, and local databases. The project supports digital
SharpCloud is a simple C# utility for checking for the existence of credential files related to Amazon Web Services, Microsoft Azure, and Google Compute.
credential dump using forshaw technique using SeTrustedCredmanAccessPrivilege
SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently, it can extract:
Las características principales de djhohnstein/sharpchromium son: Credential Access, Credential Dumping, Credential Harvesting, Post Exploitation.
Las alternativas de código abierto para djhohnstein/sharpchromium incluyen: gentilkiwi/mimikatz — Mimikatz is a security research suite designed for auditing Windows authentication and managing system security… alessandroz/lazagne — LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems,… eladshamir/internal-monologue — Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS. barbarisch/forkatz — credential dump using forshaw technique using SeTrustedCredmanAccessPrivilege. chrismaddalena/sharpcloud — SharpCloud is a simple C# utility for checking for the existence of credential files related to Amazon Web Services,… ghostpack/rubeus — Rubeus is a comprehensive Kerberos attack toolkit for Active Directory environments, written in C#. It provides a full…