huntergregal/mimipenguin

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

4157 stars · 649 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

MimiPenguin is a post-exploitation tool that dumps the current Linux desktop user's cleartext login password from process memory, inspired by the Windows tool mimikatz. It scans memory for credential patterns, verifying candidates against /etc/shadow hashes and in-memory hashes, and is available as a C port with shell and Python variants.

Use cases

• extract cleartext passwords from a compromised linux user's memory
• demonstrate gnome keyring cleartext credential exposure
• retrieve login password from gdm or lightdm sessions
• harvest credentials from active ssh, ftp, or http basic auth sessions
• post-exploitation credential dumping on linux during pentests

When to choose

• you need a lightweight root-level credential dumping tool on linux desktops
• you are demonstrating or testing cleartext password exposure in gnome keyring or display managers
• you want a fast C implementation with shell and python alternatives

When to avoid

• you lack root privileges on the target system
• you need a stealthy or evasive tool, since it is well-known and likely detected
• you target 64-bit userspace with the 32-bit build, which has known address-space issues
• you need support for non-desktop environments or LDAP credentials, which are not yet implemented

Facets

cli-tool · maturity maintenance

security penetration-testing security penetration-testing operating-systems cli post-exploitation password-extraction credential-dumping memory-forensics mimikatz-inspired linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="huntergregal/mimipenguin")