LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems, browsers, and applications. It functions as a security utility for retrieving stored credentials from compromised systems during penetration testing. The tool provides capabilities for decrypting domain credentials and extracting sensitive data from system storage, including memory dumps, credential managers, keychains, and password hashes. It recovers stored passwords from common software by accessing plaintext files, APIs, and local databases. The project supports digital
SharpDPAPI is a C# port of some DPAPI functionality from @gentilkiwi's Mimikatz project.
Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow
SharpCloud is a simple C# utility for checking for the existence of credential files related to Amazon Web Services, Microsoft Azure, and Google Compute.
If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord
The main features of skelsec/pypykatz are: Credential Access Tools, Credential Dumping, Credential Harvesting, Password Attacks.
Open-source alternatives to skelsec/pypykatz include: alessandroz/lazagne — LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems,… ghostpack/sharpdpapi — SharpDPAPI is a C# port of some DPAPI functionality from @gentilkiwi's Mimikatz project. gentilkiwi/mimikatz — Mimikatz is a security research suite designed for auditing Windows authentication and managing system security… eladshamir/internal-monologue — Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS. chrismaddalena/sharpcloud — SharpCloud is a simple C# utility for checking for the existence of credential files related to Amazon Web Services,… barbarisch/forkatz — credential dump using forshaw technique using SeTrustedCredmanAccessPrivilege.