Windows/Linux LSA credential extractor for lsass.dmp minidumps. Targets Windows 11 24H2/25H2/26H1 and Windows Server 2025. Pure Win32, no DbgHelp, no dependencies. Extracts MSV, WDigest, Kerberos, CredMan, DPAPI. AES-CFB128 and 3DES-CBC decryption via BCrypt
memory-analysis ntlm-hashes kerberos-tickets lsass-dump windows-server-2025 credential-extraction windows-11-25h2 dpapi-secrets cleartext-passwords offline-forensics lsa-parsing lsass-26h1
-
Updated
May 14, 2026 - C++