How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader.
The main features of ghostpack/safetykatz are: File Format Analysis, Credential Dumping, Credential Harvesting, Security Tooling.
Open-source alternatives to ghostpack/safetykatz include: gentilkiwi/mimikatz — Mimikatz is a security research suite designed for auditing Windows authentication and managing system security… eladshamir/internal-monologue — Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS. barbarisch/forkatz — credential dump using forshaw technique using SeTrustedCredmanAccessPrivilege. chrismaddalena/sharpcloud — SharpCloud is a simple C# utility for checking for the existence of credential files related to Amazon Web Services,… alessandroz/lazagne — LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems,… djhohnstein/sharpchromium — SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta.…
Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow
SharpCloud is a simple C# utility for checking for the existence of credential files related to Amazon Web Services, Microsoft Azure, and Google Compute.
LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems, browsers, and applications. It functions as a security utility for retrieving stored credentials from compromised systems during penetration testing. The tool provides capabilities for decrypting domain credentials and extracting sensitive data from system storage, including memory dumps, credential managers, keychains, and password hashes. It recovers stored passwords from common software by accessing plaintext files, APIs, and local databases. The project supports digital
credential dump using forshaw technique using SeTrustedCredmanAccessPrivilege