nccgroup/redsnarf

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1216 stars · 235 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

RedSnarf is a pen-testing/red-teaming tool for retrieving hashes and credentials from Windows workstations, servers, and domain controllers using OpSec-safe techniques. It supports hash dumping, pass-the-hash, LSASS dumping, NTDS.dit extraction, and various remote administration tasks.

Use cases

• retrieve hashes and credentials from windows machines
• dump domain controller hashes with ntdsutil or drsuapi
• perform pass-the-hash attacks during pentests
• spray hashes across a subnet to find weak credentials
• decrypt gpp cpassword and winscp passwords
• find where domain users are logged in remotely
• retrieve wifi passwords from remote windows machines

When to choose

• you are doing authorized red-team or penetration testing against windows/active-directory environments
• you need opsec-safe credential retrieval and hash dumping in one tool
• you want quick enumeration of elevated users, lsa secrets, and cached credentials

When to avoid

• you need a maintained tool - the last release was 2020 and development appears stalled
• you are not on a windows-focused engagement or lack the required dependencies like impacket and creddump7
• you need stealth against modern EDR, as techniques like lsass dumping are widely detected

Facets

cli-tool · maturity maintenance

penetration-testing security security penetration-testing windows windows python cli red-team credential-harvesting active-directory pass-the-hash mimikatz opsec

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nccgroup/redsnarf")