You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit 6cb67aa
Browse filesBrowse the repository at this point in the historyBrowse files
Copy file name to clipboardExpand all lines: README.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -275,5 +275,5 @@ Tested across 7 Windows versions and 4 hypervisors.
275
275
VMkatz builds on the foundational work of several projects that mapped out Windows credential internals:
276
276
277
277
-[**mimikatz**](https://github.com/gentilkiwi/mimikatz) by Benjamin Delpy ([@gentilkiwi](https://twitter.com/gentilkiwi)) -- the original Windows credential extraction tool. mimikatz's source code is the definitive reference for LSASS internals: SSP structures, crypto key resolution, credential decryption across Windows versions. VMkatz's 9-provider extraction pipeline follows the architecture Benjamin documented.
278
-
-[**pypykatz**](https://github.com/skelsec/pypykatz) by Tamas Jos ([@skaborern](https://twitter.com/skaborern)) -- a pure Python reimplementation of mimikatz credential parsing. pypykatz's clean separation of minidump reading from credential decryption informed VMkatz's design, and its SAM/LSA/DCC2 extraction logic served as a cross-reference for offline registry decryption.
278
+
-[**pypykatz**](https://github.com/skelsec/pypykatz) by Tamás Jós ([@skelsec](https://twitter.com/skaborern)) -- a pure Python reimplementation of mimikatz credential parsing. pypykatz's clean separation of minidump reading from credential decryption informed VMkatz's design, and its SAM/LSA/DCC2 extraction logic served as a cross-reference for offline registry decryption.
279
279
-[**Impacket**](https://github.com/fortra/impacket) by Fortra (originally by Alberto Solino [@agsolino](https://twitter.com/agsolino)) -- the standard Python library for Windows network protocols. Impacket's `secretsdump.py` is the reference implementation for NTDS.dit extraction, SAM dumping, and the pwdump output format that VMkatz's `--format ntlm` follows.
0 commit comments