Mimikatz
Sign in to saveMimikatz is both an exploit on Microsoft Windows that extracts passwords stored in memory and software that performs that exploit. It was created by French programmer Benjamin Delpy and is French slang for "cute cats".
Source code
mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets . mimikatz uses SVN for source control, but is now available with GIT too! You can use any tools you want to sync, even incorporated GIT in Visual Studio 2013 =) Build the solution After opening the solution, Build / Build Solution (you can change architecture) mimikatz is now built and ready to be used! ( Win32 / x64 even ARM64 if you're lucky) you can have error MSB3073 about build .cmd and mimidrv , it's because the driver cannot be build without Windows Driver Kit 7.1 (WinDDK), but mimikatz and mimilib are OK. For this optional platform, Windows Driver Kit 7.1 (WinDDK) - and Visual Studio 2010 are mandatory, even if you plan to use Visual Studio 2012 or 2013 after. This is a personal development, please respect its philosophy and don't use it for bad things!
Excerpt from the source-code README · 5,211 chars · not written by Vinony
~2 min read
Encyclopedic overview
7 sectionsContents
- History
- Russian conference
- Windows updates
- Use in malware
- In popular culture
- References
- External links
Mimikatz is both an exploit on Microsoft Windows that extracts passwords stored in memory and software that performs that exploit. It was created by French programmer Benjamin Delpy and is French slang for "cute cats".
==History== Benjamin Delpy discovered a flaw in Microsoft Windows that holds both an encrypted copy of a password and a key that can be used to decipher it in memory at the same time. He contacted Microsoft in 2011 to point out the flaw, but Microsoft replied that it would require the machine to be already compromised. Delpy realised that the flaw could be used to gain access to non-compromised machines on a network from a compromised machine.
Excerpted from Wikipedia’s “Mimikatz” article, available under the CC BY-SA 4.0 licence.