# lgandx/PCredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Repository: https://github.com/lgandx/PCredz
Canonical: https://ross.abutalabs.com/products/pcredz
Language: Python
License: GPL-3.0
License Family: copyleft
Last push: 2026-03-02T17:42:24+00:00

## Health v2 (maintenance only)
Score: 64/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 70, release rhythm 35, longevity 100
- inputs: {"age_days": 4532, "days_push": 184, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2548, forks 455 (observed 2026-08-28T04:07:00.354893+00:00)

## What it is
PCredz is a Python CLI tool that extracts credentials and authentication tokens (NTLM, Kerberos, HTTP Basic, FTP, SMTP, IMAP, POP3, LDAP, SNMP, MSSQL, credit card numbers) from PCAP files or live network interfaces. It outputs hashes in hashcat-compatible formats and organizes findings into per-protocol log files.

## Use cases
- extract ntlm hashes from a pcap capture
- pull credentials from network traffic for pentest reports
- convert captured kerberos hashes to hashcat format
- sniff passwords on a live interface during an engagement
- find leaked credit card numbers in packet captures
- analyze pcap files for plaintext authentication

## When to choose
- you need to mine credentials from existing PCAP files or live traffic quickly
- you want hashcat-ready hash output for offline cracking
- you need broad protocol coverage including NTLM, Kerberos, and plaintext auth in one tool

## When to avoid
- you need stealthy or evasive credential capture rather than straightforward parsing
- you want a GUI or Windows-native tool
- you need to crack hashes - PCredz only extracts them

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, parser, networking
- domain: security, penetration-testing, networking, developer-tools
- platform: python, cli
- tags: credential-extraction, pcap-analysis, hashcat, ntlm, kerberos, network-forensics, linux, docker

## Member repositories
- lgandx/PCredz (main) score 64

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:00.354893+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:24:33.722440+00:00, confidence not recorded.
  - readme: https://github.com/lgandx/PCredz (fetched 2026-08-28T04:07:00.354893+00:00, sha 4685816f84bc)
- Data as of 2026-08-30T08:39:29.467469+00:00.