creddump - Google Code

Code License:	GNU General Public License v2
Labels:	pwdump, lsadump, cachedump, windows, registry, secrets, lsa, domain, cache, python, hives

Show all Featured Downloads:
creddump-0.1.tar.bz2

Blogs:	Push the Red Button

Join project

Project owners:
	mooyix

creddump is a python tool to extract various credentials and secrets from Windows registry hives. It currently extracts:

LM and NT hashes (SYSKEY protected)
Cached domain passwords
LSA secrets

It essentially performs all the functions that bkhive/samdump2, cachedump, and lsadump2 do, but in a platform-independent way.

It is also the first tool that does all of these things in an offline way (actually, Cain & Abel does, but is not open source and is only available on Windows).