Tools

huntergregal/mimipenguin

A tool to dump the login password from the current linux user

ph4ntonn/impost3r

👻Impost3r -- A linux password thief

darkspacesecurity/ssh-stealer

Smart keylogging capability to steal SSH Credentials including password & Private Key

sho-luv/zerologon

Zerologon Check and Exploit - Discovered by Tom Tervoort of Secura and expanded on @Dirkjanm's cve-2020-1472 coded example. This tool will check,…

hell-moon/zerologon-exploit

Modified the test PoC from Secura, CVE-2020-1472, to change the machine password to null

s3cur3th1ssh1t/creds

Some usefull Scripts and Executables for Pentest & Forensics

bitsadmin/fakelogonscreen

Windows credential harvester that displays a fake logon screen, validates captured passwords against AD or local machine, and outputs them to console…

ajinabraham/xenotix-python-keylogger

Xenotix Python Keylogger for Windows.

n00py/wpforce

Wordpress Attack Suite

strozfriedberg/evilabigail

Automated Linux evil maid attack

v1v1/decryptteamviewer

Enumerate and decrypt TeamViewer credentials from Windows registry

mzhmo/leakedwallpaper

Leak of any user's NetNTLM hash. Fixed in KB5040434

wavvs/nanorobeus

COFF file (BOF) for managing Kerberos tickets.

d3lb3/keefarcereborn

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

wh0amitz/bypasscredguard

Credential Guard Bypass Via Patching Wdigest Memory

fin3ss3g0d/secretsdump.py

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets…

darkspacesecurity/runas-stealer

RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging

0xedh/dumpguard_bof

Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.