orlyjamie/mimikittenz

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1867 stars · 332 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

mimikittenz is a post-exploitation PowerShell tool that uses the Windows ReadProcessMemory() function to extract plain-text passwords and other sensitive data from running process memory at user-level privileges. It supports regex-based extraction of credentials from webmail, VPN, development, and cloud services, plus custom targets.

Use cases

• extract plain-text passwords from browser process memory
• harvest credentials during post-exploitation without admin privileges
• pull TRACK2 credit card data from POS process memory
• extract PII and encryption keys from running processes
• add custom regex patterns to scrape specific services from memory
• red team engagement credential gathering on Windows targets

When to choose

• you need user-level (non-admin) credential extraction on Windows
• you want regex-based scraping of sensitive data from live process memory
• you are performing authorized red team or penetration testing on Windows

When to avoid

• you need a maintained tool with active security updates
• you require a permissively licensed tool for commercial redistribution
• you target non-Windows platforms
• you need stealth against modern EDR which detects memory-scraping techniques

Facets

cli-tool · maturity maintenance

security penetration-testing osint security penetration-testing windows cli post-exploitation powershell memory-extraction credential-harvesting red-team readprocessmemory

Member repositories

For agents

markdown · JSON · MCP: product_card(name="orlyjamie/mimikittenz")