mimikatz
A powerful tool for extracting passwords and performing various Windows security operations.
A powerful tool for extracting passwords and performing various Windows security operations.
Checked October 2026.
mimikatz is a tool developed to learn C and experiment with Windows security, known for extracting plaintext passwords, hashes, PIN codes, and kerberos tickets from memory. It can also perform pass-the-hash, pass-the-ticket, or build Golden tickets. The tool includes 13 modules and additional functionalities for crypto, Terminal Server, and Events. For more information, visit the GitHub Wiki: https://github.com
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about mimikatz: features, pricing and alternatives.
mimikatz is a product in the Red-Team & Adversary Emulation category. It covers Memory Forensics, Password Cracking and Windows.
mimikatz is free. Download and setup instructions are at https://github.com/gentilkiwi/mimikatz/.
Alternatives to mimikatz listed on CybersecTools:
Compare all mimikatz alternatives at https://cybersectools.com/alternatives/mimikatz
mimikatz is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A project for demonstrating AWS attack techniques with a focus on ethical hacking practices.
A framework for creating XNU based rootkits for OS X and iOS security research
A cross-platform HTTP/2 Command & Control framework written in Golang for post-exploitation activities and remote system management.
MITRE Caldera™ is an automated adversary emulation platform built on the MITRE ATT&CK framework that supports red team operations and incident response activities through a modular C2 server and plugin architecture.
A powerful tool for hiding the true location of your Teamserver, evading detection from Incident Response, redirecting users, blocking specific IP addresses, and managing Malleable C2 traffic in Red Team engagements.
Modlishka is a reverse proxy tool for intercepting and manipulating HTTP traffic, ideal for penetration testers, security researchers, and developers to analyze and test web applications.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
