Password Attacks

m3f157o/combine_harvester

Rust in-memory dumper

fin3ss3g0d/secretsdump.py

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets…

hackerhouse-opensource/offensivelua

Offensive Lua.

vozec/cve-2023-7028

This repository presents a proof-of-concept of CVE-2023-7028

gquere/pwn_jenkins

Notes about attacking Jenkins servers

leftp/backupcreds

A C# implementation of dumping credentials from Windows Credential Manager

soufianetahiri/teamsntlmleak

Leak NTLM via Website tab in teams via MS Office

meowmycks/letmeowin

A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.

mzhmo/leakedwallpaper

Leak of any user's NetNTLM hash. Fixed in KB5040434

meckazin/chromekatz

Dump cookies and credentials directly from Chrome/Edge process memory

rweijnen/createdump

Leverage WindowsApp createdump tool to obtain an lsass dump

offensive-panda/lsassreflectdumping

This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created,…

darkspacesecurity/ssh-stealer

Smart keylogging capability to steal SSH Credentials including password & Private Key

xforcered/remotemonologue

Weaponizing DCOM for NTLM Authentication Coercions

3lp4tr0n/remotemonologue

Weaponizing DCOM for NTLM Authentication Coercions

paradoxis/adsyncdump-bof

The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencies.

evilmog/ntlmv1-multi

NTLMv1 Multitool