TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control systems, cloud storage, and filesystems. It functions as a git secret detector that enumerates hidden commits and a cloud storage security auditor for inspecting container images and storage buckets. The project is distinguished by a credential verification engine that tests discovered secrets against service APIs to confirm they are active, which eliminates false positive alerts. It further analyzes these verified credentials to determine the specific access levels and resources t
credential dump using forshaw technique using SeTrustedCredmanAccessPrivilege
Rubeus is a comprehensive Kerberos attack toolkit for Active Directory environments, written in C#. It provides a full suite of operations for manipulating Kerberos tickets, exploiting delegation configurations, and performing credential attacks against Windows domains. The toolkit enables ticket extraction from logon sessions and memory, with real-time monitoring via Event Tracing for Windows. It supports forging golden and silver tickets with arbitrary privileges, as well as the creation of forged delegation contexts. Delegation attacks include abuse of constrained and unconstrained delegat
Extracting Clear Text Passwords from mstsc.exe using API Hooking.
0x09al/rdpthief 的主要功能包括：Credential Harvesting, Offensive Security Tools。
0x09al/rdpthief 的开源替代品包括： dxa4481/trufflehog — TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control… ghostpack/sharpdpapi — SharpDPAPI is a C# port of some DPAPI functionality from @gentilkiwi's Mimikatz project. barbarisch/forkatz — credential dump using forshaw technique using SeTrustedCredmanAccessPrivilege. deepinstinct/lsasssilentprocessexit. ghostpack/rubeus — Rubeus is a comprehensive Kerberos attack toolkit for Active Directory environments, written in C#. It provides a full… zricethezav/gitleaks — Gitleaks is a static analysis security tool and secret detection engine designed to find hardcoded passwords, API…