# login-securite/lsassy

Extract credentials from lsass remotely

Repository: https://github.com/login-securite/lsassy
Canonical: https://ross.abutalabs.com/products/lsassy
Homepage: https://en.hackndo.com/remote-lsass-dump-passwords/
Language: Python
License: MIT
License Family: permissive
Last push: 2026-03-23T09:18:15+00:00

## Health v2 (maintenance only)
Score: 71/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 73, release rhythm 52, longevity 100
- inputs: {"age_days": 2465, "days_push": 163, "days_rel": 163, "gap_med": 116.5, "n_releases_24m": 5}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2210, forks 261 (observed 2026-08-28T04:06:26.335923+00:00)

## What it is
Lsassy is a Python CLI tool that remotely extracts credentials from the LSASS process memory of Windows hosts over the network. It uses impacket to read lsass dump bytes remotely and pypykatz to parse the credentials.

## Use cases
- dump credentials from lsass on remote windows hosts
- extract passwords and hashes during a penetration test
- perform credential harvesting across a subnet or host list
- lateral movement in active directory environments
- authenticate with password, NTLM hash, or Kerberos to dump lsass
- integrate lsass dumping into a CrackMapExec workflow

## When to choose
- you need to remotely dump lsass credentials from many Windows machines at once
- you want a Python-based alternative to running Mimikatz on each host
- you need flexible authentication options including pass-the-hash and Kerberos

## When to avoid
- you only need local credential dumping on a machine you already control
- you cannot leave any traces, since failed dumps may leave artifacts like lsass dump files or scheduled tasks
- your targets are not Windows or not reachable via SMB/WMI

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, cli
- domain: security, penetration-testing, windows
- platform: python, cli, windows, cross-platform
- tags: credential-dumping, lsass, active-directory, impacket, pypykatz, red-team, lateral-movement

## Member repositories
- login-securite/lsassy (main) score 71

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:26.335923+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:46:11.119009+00:00, confidence not recorded.
  - readme: https://github.com/login-securite/lsassy (fetched 2026-08-28T04:06:26.335923+00:00, sha 295ac6c6dca2)
  - homepage: https://en.hackndo.com/remote-lsass-dump-passwords/ (fetched 2026-08-29T10:26:38.531283+00:00, sha 8a5d58bed181)
  - site_page: https://en.hackndo.com/about (fetched 2026-08-29T10:26:38.540853+00:00, sha 2b5d917c1118)
- Data as of 2026-08-30T08:39:29.467469+00:00.