Credential Dumping Category

blog
9+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Credential Dumping blog

Filters

  • GetLAPSPassword.py: Recover LAPS Passwords with Impacket
    tools

    GetLAPSPassword.py: Recover LAPS Passwords with Impacket

    Impacket's GetLAPSPassword.py guide for recovering encrypted Legacy LAPS and Windows LAPS passwords from Active Directory with passwords, NTLM hashes, or Kerberos.

    Discover more Discover more
  • Credential Dumping on Windows: LSASS, SAM, DPAPI and NTDS.dit
    guides-resources

    Credential Dumping on Windows: LSASS, SAM, DPAPI and NTDS.dit

    Credential dumping on Windows: NTLM hash and Kerberos tickets from LSASS, SAM, LSA Secrets, DPAPI and NTDS.dit with Mimikatz, ProcDump and secretsdump on Active Directory

    Discover more Discover more
  • Post-Exploitation Windows and Active Directory: Complete Guide
    guides-resources

    Post-Exploitation Windows and Active Directory: Complete Guide

    Post-exploitation Windows and Active Directory: enumeration, privilege escalation, credential dumping, persistence, lateral movement and operational cleanup.

    Discover more Discover more
  • impacket-secretsdump: Dump Windows Hashes and Credentials
    tools

    impacket-secretsdump: Dump Windows Hashes and Credentials

    How to impacket-secretsdump: Remote and offline dump of NTLM hashes, SAM, LSA secrets, Kerberos keys, and NTDS.dit in Windows and Active Directory.

    Discover more Discover more
  • Mimipenguin: Dump Linux Credentials from Memory (Post-Exploitation)
    linux

    Mimipenguin: Dump Linux Credentials from Memory (Post-Exploitation)

    Mimipenguin is a post-exploitation script for Linux that extracts cleartext passwords from the memory of processes such as SSH, sudo, and display managers.

    Discover more Discover more
  • LaZagne: Password Extraction from Browsers and Applications
    tools

    LaZagne: Password Extraction from Browsers and Applications

    LaZagne is an open-source tool for recovering saved passwords on Windows and Linux from browsers, email clients, and local software post-exploitation.

    Discover more Discover more
  • DCSync: Active Directory Credential Dump via Replication Abuse
    windows

    DCSync: Active Directory Credential Dump via Replication Abuse

    DCSync is an Active Directory technique that allows credential hash extraction by abusing the domain replication mechanism. It is used post-exploitation to obtain NTLM hashes of privileged users without direct access to the domain controller.

    Discover more Discover more
  • KeeThief: Master Key and Credential Dump from KeePass
    tools

    KeeThief: Master Key and Credential Dump from KeePass

    KeeThief: How to extract master keys and credentials from KeePass during an authorized pentest. Memory dumps, .kdbx files, operational limitations, detection, and post-exploitation.

    Discover more Discover more
  • SafetyKatz: Mimikatz Memory-Only Wrapper for LSASS Credential Dumping and EDR Evasion
    tools

    SafetyKatz: Mimikatz Memory-Only Wrapper for LSASS Credential Dumping and EDR Evasion

    SafetyKatz is a Mimikatz wrapper for in-memory credential dumping from LSASS, without writing to disk. It supports EDR evasion, NTLM hash extraction, and integration with Cobalt Strike for post-exploitation in Active Directory.

    Discover more Discover more