Ad

BetterSafetyKatz: Mimikatz with Dynamic Updates

BetterSafetyKatz dynamically downloads and executes Mimikatz from GitHub, employing runtime signature patching and memory injection for enhanced evasion.
Screenshot of Flangvik/BetterSafetyKatz homepage

BetterSafetyKatz is a C# port of SafetyKatz that simplifies the process of obtaining and executing Mimikatz. It addresses the challenge of manually downloading and patching Mimikatz by automating the retrieval of the latest pre-compiled version from the official GitHub repository. The tool uses SharpSploit DInvoke to inject Mimikatz into memory, bypassing API hooking mechanisms.

This project offers simplified Mimikatz execution through automatic updates, reducing manual configuration. It utilizes memory randomization and signature patching to evade detection. The in-memory patching ensures Mimikatz is ready to use without requiring disk access. It leverages SharpSploit DInvoke for memory injection, providing a more robust and potentially stealthier execution method.

  • Dynamic Updates: Automatically fetches the latest Mimikatz release from GitHub.
  • Signature Patching: Randomizes strings in memory to evade Windows Defender detection.
  • Memory Injection: Uses SharpSploit DInvoke for stealthy and API hooking-resistant execution.
  • Configuration: Supports specifying remote or local paths for Mimikatz binaries.
  • Evasion Techniques: Implements randomization and patching to bypass security measures.
  • Ease of Use: Simplifies the process of verifying and executing Mimikatz.
  • Portability: Written in C#, allowing for cross-platform compatibility.

The project appears to be actively maintained, with recent commits and ongoing development. The documentation is minimal but functional, providing basic usage instructions. The reliance on external resources (gentilkiwi's repo, SharpSploit) introduces some dependency risk. The active development indicates ongoing support and potential improvements.

BetterSafetyKatz is valuable for security researchers and penetration testers seeking a streamlined and evasive way to utilize Mimikatz. It provides a convenient solution for bypassing security measures and extracting credentials. Compared to manual patching and setup, it significantly reduces the time and effort required to deploy and use Mimikatz in various assessment scenarios.

Languages:
Summarize:
Share:
Stars
886
Forks
116
Issues
0
Created
6 years ago
Commit
5 years ago
License
OTHER
Archived
No
Updated 1 day ago

Similar Repositories