Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow
SharpCloud is a simple C# utility for checking for the existence of credential files related to Amazon Web Services, Microsoft Azure, and Google Compute.
LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems, browsers, and applications. It functions as a security utility for retrieving stored credentials from compromised systems during penetration testing. The tool provides capabilities for decrypting domain credentials and extracting sensitive data from system storage, including memory dumps, credential managers, keychains, and password hashes. It recovers stored passwords from common software by accessing plaintext files, APIs, and local databases. The project supports digital
credential dump using forshaw technique using SeTrustedCredmanAccessPrivilege
SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader.
ghostpack/safetykatz 的主要功能包括：File Format Analysis, Credential Dumping, Credential Harvesting, Security Tooling。
ghostpack/safetykatz 的开源替代品包括： gentilkiwi/mimikatz — Mimikatz is a security research suite designed for auditing Windows authentication and managing system security… eladshamir/internal-monologue — Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS. barbarisch/forkatz — credential dump using forshaw technique using SeTrustedCredmanAccessPrivilege. chrismaddalena/sharpcloud — SharpCloud is a simple C# utility for checking for the existence of credential files related to Amazon Web Services,… alessandroz/lazagne — LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems,… djhohnstein/sharpchromium — SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta.…