gentilkiwi/mimikatz

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

21799 stars · 4155 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

mimikatz is a well-known Windows security tool written in C that extracts plaintext passwords, hashes, PINs, and Kerberos tickets from memory. It also supports attacks like pass-the-hash, pass-the-ticket, and Golden Ticket generation, plus crypto and vault manipulation.

Use cases

• extract passwords and hashes from windows lsass memory
• perform pass-the-hash attacks
• dump kerberos tickets and build golden tickets
• export certificates and private keys from windows crypto stores
• dump sam and dcsync domain credentials
• test windows credential protection during pentests

When to choose

• you are doing authorized penetration testing or red teaming on Windows
• you need to demonstrate credential-theft risks to justify security hardening
• you are researching Windows authentication, Kerberos, or LSASS internals

When to avoid

• you want a defensive-only tool - this is offensive by design and widely flagged by AV/EDR
• you are on Linux or macOS - it targets Windows
• you lack authorization - using it against systems you don't own is illegal

Facets

cli-tool · maturity active

security penetration-testing cryptography cli security penetration-testing windows windows cli credential-extraction pass-the-hash kerberos red-team post-exploitation lsass

Member repositories

For agents

markdown · JSON · MCP: product_card(name="gentilkiwi/mimikatz")