AutoPtT
ricardojoserf/autopttAutomated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust, Golang, Nim…
authenticationlateral-movementpost-exploitation+1
156
ricardojoserf/autopttAutomated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust, Golang, Nim…
zblurx/dplootLoot and decrypt Windows DPAPI secrets remotely or offline, including masterkeys, credentials, vaults, certificates, browser data, and cached Azure…
ricardojoserf/trickdumpDump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!
netwrix/pingcastleActive Directory security risk assessment tool that evaluates vulnerabilities, misconfigurations, and maturity using a streamlined methodology,…
0xdea/blindsightRed teaming tool to dump LSASS memory, bypassing basic countermeasures.
gentilkiwi/mimikatzA little tool to play with Windows security
nikaiw/vmkatzExtract Windows credentials directly from VM memory snapshots and virtual disks
skelsec/pypykatzMimikatz implementation in pure Python
the-viper-one/psmapexecDominate Active Directory with PowerShell.
ghostpack/rubeusTrying to tame the three-headed dog.
ihebski/a-red-teamer-diariesRedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
maldev-academy/maldevacademyldr.2RunPE implementation with multiple evasive techniques (2)
shutdownrepo/dcshadowPython alternative to Mimikatz lsadump::dcshadow
offensive-panda/lsassreflectdumpingThis tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created,…
deh00ni/ntdumpbofCobalt Strike BOF that creates an LSASS minidump in memory and exfiltrates it over the C2 callback for offline credential parsing with Mimikatz or…
parrotsec/mimikatzTool for extracting Windows credentials (passwords, hashes, Kerberos tickets) from memory and performing pass-the-hash, pass-the-ticket, and golden…
ghostpack/sharpdpapiSharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
sans-blue-team/deepbluecliPowerShell-based threat hunting tool that analyzes Windows Event Logs to detect malicious activity including credential attacks, obfuscated commands,…