uknowsec/SharpDecryptPwd

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1270 stars · 176 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

SharpDecryptPwd is a Windows command-line tool that decrypts passwords saved locally by popular applications such as Navicat, TeamViewer, FileZilla, WinSCP, and Xmanager products (Xshell, Xftp). It is commonly used in penetration testing and red-team post-exploitation scenarios and can be executed via Cobalt Strike's execute-assembly.

Use cases

• recover saved passwords from Navicat on a Windows host
• decrypt TeamViewer credentials during a pentest
• extract saved FTP passwords from FileZilla
• dump WinSCP stored session passwords
• decrypt Xshell and Xftp session passwords
• run credential decryption via Cobalt Strike execute-assembly

When to choose

• you are doing authorized penetration testing or red-team engagements on Windows
• you need to quickly recover credentials saved by common Windows applications
• you want a small standalone .NET assembly usable with Cobalt Strike

When to avoid

• you need a maintained or updated tool - the author has deprecated this repo in favor of a rewritten version
• you need password recovery on non-Windows systems
• you are looking for a legitimate enterprise password manager or audit tool

Facets

cli-tool · maturity abandoned

security cryptography cli security penetration-testing windows windows cli password-recovery credential-decryption red-team post-exploitation csharp cobalt-strike

Member repositories

For agents

markdown · JSON · MCP: product_card(name="uknowsec/SharpDecryptPwd")