wesmar/KvcForensic

Windows/Linux LSA credential extractor for lsass.dmp minidumps. Targets Windows 11 24H2/25H2/26H1 and Windows Server 2025. Pure Win32, no DbgHelp, no dependencies. Extracts MSV, WDigest, Kerberos, CredMan, DPAPI. AES-CFB128 and 3DES-CBC decryption via BCrypt

语言：C++ · GitHub 星标：44 · Fork：7

话题：cleartext-passwords · credential-extraction · dpapi-secrets · kerberos-tickets · lsa-parsing · lsass-26h1 · lsass-dump · memory-analysis

在 GitHub 上查看原仓库