What is this?
A small Windows security tool, originally written to learn C. It is best known for extracting plaintext passwords, hashes, PIN codes and Kerberos tickets from memory, and can perform pass-the-hash, pass-the-ticket or build Golden tickets.
A small Windows security tool, originally written to learn C. It is best known for extracting plaintext passwords, hashes, PIN codes and Kerberos tickets from memory, and can perform pass-the-hash, pass-the-ticket or build Golden tickets.Is it a library I code against, or a program I just run?A standalone Windows console program. The Visual Studio solution also includes mimilib and an optional WinDDK driver (mimidrv), which is not required for the main operations.
A standalone Windows console program. The Visual Studio solution also includes mimilib and an optional WinDDK driver (mimidrv), which is not required for the main operations.How do I get it on my machine?Grab the prebuilt binaries from GitHub releases if you don't want to compile. Otherwise clone the repo (GIT or SVN both work), open the Visual Studio solution and run Build / Build Solution.
Grab the prebuilt binaries from GitHub releases if you don't want to compile. Otherwise clone the repo (GIT or SVN both work), open the Visual Studio solution and run Build / Build Solution.Are there any pitfalls when building it?Expect a possible error MSB3073 about build.cmd and mimidrv: the driver cannot be compiled without WinDDK 7.1, though mimikatz and mimilib still build fine without it.
Expect a possible error MSB3073 about build.cmd and mimidrv: the driver cannot be compiled without WinDDK 7.1, though mimikatz and mimilib still build fine without it.Who is this tool actually for?The author built it to learn C and experiment with Windows security, and it is widely used in pentesting and red teaming. He explicitly asks users to respect its philosophy and not use it for bad things.
The author built it to learn C and experiment with Windows security, and it is widely used in pentesting and red teaming. He explicitly asks users to respect its philosophy and not use it for bad things.Does it run only on Windows?Yes, Windows only — it builds as a Visual Studio solution for Win32 and x64, with ARM64 'if you're lucky', in the author's words.
Yes, Windows only — it builds as a Visual Studio solution for Win32 and x64, with ARM64 'if you're lucky', in the author's words.Anything unusual about its license?It uses CC BY 4.0 — a Creative Commons license rather than a typical code license. The project is a personal development by Benjamin DELPY (gentilkiwi), supported via PayPal donations.
It uses CC BY 4.0 — a Creative Commons license rather than a typical code license. The project is a personal development by Benjamin DELPY (gentilkiwi), supported via PayPal donations.What can it do with credentials and Kerberos tickets?It can perform pass-the-hash and pass-the-ticket attacks and build Golden Kerberos tickets. The lsadump module also includes DCSync and DCShadow, which were co-written with Vincent LE TOUX.
It can perform pass-the-hash and pass-the-ticket attacks and build Golden Kerberos tickets. The lsadump module also includes DCSync and DCShadow, which were co-written with Vincent LE TOUX.Which modules does the tool have?The quick-usage section covers sekurlsa, kerberos, crypto, vault and lsadump. The README also mentions crypto, Terminal Server and Events functionality, with more details in the GitHub Wiki.
The quick-usage section covers sekurlsa, kerberos, crypto, vault and lsadump. The README also mentions crypto, Terminal Server and Events functionality, with more details in the GitHub Wiki.What are mimilib, mimidrv and mimilove?They are companion parts of the solution: mimilib is a library, mimidrv is an optional Windows driver not needed for the main operations, and mimilove is another component that also requires WinDDK 7.1 to build.
They are companion parts of the solution: mimilib is a library, mimidrv is an optional Windows driver not needed for the main operations, and mimilove is another component that also requires WinDDK 7.1 to build.What are similar projects?fsociety, TheFatRat, evilginx2, PowerSploit, CVE-2026-62911, hacker-roadmap, Claude-Red, thc-hydra
fsociety, TheFatRat, evilginx2, PowerSploit, CVE-2026-62911, hacker-roadmap, Claude-Red, thc-hydraWhich topics is it in?post-exploitation, password, visual-studio, driver, hacking-tool, offensive-security, red-team, pentesting, hacking, cybersecurity, security-tools, c
post-exploitation, password, visual-studio, driver, hacking-tool, offensive-security, red-team, pentesting, hacking, cybersecurity, security-tools, c