{"adoption": {"forks": 177, "observed_at": "2026-08-28T04:04:55.220112+00:00", "stars": 1507}, "canonical_url": "https://ross.abutalabs.com/products/vmkatz", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Extract Windows credentials directly from VM memory snapshots and virtual disks", "domain": ["security", "penetration-testing", "windows"], "enriched": true, "function": ["security", "cli", "developer-tools"], "health_score": 91, "homepage": null, "language": "Rust", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["nikaiw/VMkatz"], "name": "nikaiw/VMkatz", "platform": ["windows", "cli", "cross-platform"], "pushed_at": "2026-06-07T18:29:44+00:00", "repo": "nikaiw/VMkatz", "stars": 1507, "tags": ["credential-extraction", "mimikatz", "lsass", "vmware", "esxi", "vmdk", "qcow2", "red-team", "post-exploitation", "ntlm", "dpapi", "offline-forensics", "virtualization", "linux", "macos"], "topics": ["esxi", "lsass", "mimikatz", "ntlm", "offensive-security", "post-exploitation", "qcow2", "vdi", "vhdx", "virtualbox", "vmdk", "vmware"], "urls": [], "use_cases": ["extract ntlm hashes from vmware memory snapshots", "dump lsass credentials from vmdk or vmsn files", "get windows passwords from virtual disks without booting the vm", "pull kerberos tickets and dpapi master keys from vm snapshots", "extract sam hashes and lsa secrets from a windows vm disk offline", "harvest credentials on an esxi host during a red team engagement", "recover bitlocker keys from vm memory dumps"], "what_it_is": "VMkatz is a Rust CLI tool that extracts Windows credentials (NTLM hashes, DPAPI keys, Kerberos tickets, LSA secrets, BitLocker keys) directly from VM memory snapshots and virtual disks. It runs in place on hypervisors or NAS devices, avoiding the need to exfiltrate large disk images.", "when_to_avoid": ["you need to dump credentials from a running live system rather than snapshots or disks", "you need a general-purpose forensics suite rather than credential extraction", "you lack legal authorization to access the target VM files"], "when_to_choose": ["you need Windows credentials from VM files you can access but cannot or should not copy", "you want mimikatz-style extraction without running code on the live guest", "you work on ESXi, Proxmox, or NAS storage and need a small static binary", "you need offline SAM/LSA/DPAPI extraction from virtual disks"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/vmkatz", "repo": "nikaiw/VMkatz", "role": "main", "score": 69}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:55.220112+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:32:37.782441+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "67f8c767f390116cd4657b8d1a75582c399fbab1e3289d7a79d4d94a22bbbdd9", "fetched_at": "2026-08-28T04:04:55.220112+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nikaiw/VMkatz"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 86, "longevity": 13, "rhythm": 79}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 195, "days_push": 87, "days_rel": 140, "gap_med": 4.5, "n_releases_24m": 7}, "score": 69, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}