mimikatz
A Windows security tool for extracting credentials, hashes, and Kerberos tickets from memory and performing various post-exploitation techniques.
What is mimikatz?
mimikatz is a Windows security tool that extracts authentication credentials like passwords, hashes, and Kerberos tickets from system memory. It enables security professionals to demonstrate vulnerabilities in Windows authentication mechanisms and perform post-exploitation techniques such as pass-the-hash and golden ticket attacks.
Security researchers, penetration testers, red teamers, and system administrators who need to audit Windows security or understand credential exposure risks.
mimikatz provides deep, low-level access to Windows security subsystems that few other tools offer, making it indispensable for realistic security assessments and educational exploration of Windows authentication flaws.
Overview
A little tool to play with Windows security
Use Cases
Best For
- Extracting plaintext passwords from Windows memory during penetration tests
- Demonstrating pass-the-hash attacks in Active Directory environments
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
