Tools

rxwx/chlonium

Clone and import Chromium cookies and passwords across browsers with offline DPAPI state key decryption, supporting AES-256 GCM encrypted databases…

lintstar/lstar

LSTAR - CobaltStrike 综合后渗透插件

gentilkiwi/mimikatz

A little tool to play with Windows security

skelsec/pypykatz

Mimikatz implementation in pure Python

zblurx/dploot

Loot and decrypt Windows DPAPI secrets remotely or offline, including masterkeys, credentials, vaults, certificates, browser data, and cached Azure…

sans-blue-team/deepbluecli

PowerShell-based threat hunting tool that analyzes Windows Event Logs to detect malicious activity including credential attacks, obfuscated commands,…

eladshamir/internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

ghostpack/sharpdpapi

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

aas-n/spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

maldev-academy/maldevacademyldr.2

RunPE implementation with multiple evasive techniques (2)

anthemtotheego/sharpsploitconsole

C# console application for post-exploitation and red team operations, integrating SharpSploit to execute Mimikatz commands, perform Kerberoasting,…

shutdownrepo/dcshadow

Python alternative to Mimikatz lsadump::dcshadow

deh00ni/ntdumpbof

Cobalt Strike BOF that creates an LSASS minidump in memory and exfiltrates it over the C2 callback for offline credential parsing with Mimikatz or…

qax-a-team/mscache

a tool to manipulate dcc(domain cached credentials) in windows registry, based mainly on the work of mimikatz and impacket

netwrix/pingcastle

Active Directory security risk assessment tool that evaluates vulnerabilities, misconfigurations, and maturity using a streamlined methodology,…

parrotsec/mimikatz

Tool for extracting Windows credentials (passwords, hashes, Kerberos tickets) from memory and performing pass-the-hash, pass-the-ticket, and golden…

ihebski/a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.