login-securite/lsassy

Health v2 · maintenance only

Adoption not part of the score

2210 stars · 261 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Lsassy is a Python CLI tool that remotely extracts credentials from the LSASS process memory of Windows hosts over the network. It uses impacket to read lsass dump bytes remotely and pypykatz to parse the credentials.

Use cases

• dump credentials from lsass on remote windows hosts
• extract passwords and hashes during a penetration test
• perform credential harvesting across a subnet or host list
• lateral movement in active directory environments
• authenticate with password, NTLM hash, or Kerberos to dump lsass
• integrate lsass dumping into a CrackMapExec workflow

When to choose

• you need to remotely dump lsass credentials from many Windows machines at once
• you want a Python-based alternative to running Mimikatz on each host
• you need flexible authentication options including pass-the-hash and Kerberos

When to avoid

• you only need local credential dumping on a machine you already control
• you cannot leave any traces, since failed dumps may leave artifacts like lsass dump files or scheduled tasks
• your targets are not Windows or not reachable via SMB/WMI

Facets

cli-tool · maturity active

security penetration-testing cli security penetration-testing windows python cli windows cross-platform credential-dumping lsass active-directory impacket pypykatz red-team lateral-movement

Member repositories

For agents

markdown · JSON · MCP: product_card(name="login-securite/lsassy")