SnaffCon/Snaffler

Health v2 · maintenance only

Adoption not part of the score

2915 stars · 283 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Snaffler is a C# command-line tool for pentesters and red teamers that enumerates Windows/AD environments to find sensitive files (mostly credentials) on readable network file shares. It discovers domain computers and shares, then scans files using regex-based rules to flag interesting content.

Use cases

• find credentials in windows file shares during a pentest
• enumerate active directory shares for sensitive files
• red team internal recon for juicy files
• scan a network share directory for secrets
• hunt for passwords in a large AD environment

When to choose

• you are a pentester or red teamer assessing a Windows/AD environment
• you need to quickly locate credential material on readable file shares
• you want a single portable exe that runs on a domain-joined machine

When to avoid

• you need a compliance or audit tool - it is explicitly not designed for that
• you are not on a Windows/Active Directory environment
• you need ML-based file classification rather than regex rules

Facets

cli-tool · maturity active

security search-engine cli security penetration-testing windows windows cli dotnet red-team pentesting active-directory file-share-enumeration credential-hunting csharp

Member repositories

For agents

markdown · JSON · MCP: product_card(name="SnaffCon/Snaffler")