Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/Software/S0002
MITRE ATT&CK Tool

Mimikatz (S0002)

ShareXLinkedInRedditHN

[Mimikatz](https://attack.mitre.org/software/S0002) is a credential dumper capable of obtaining plaintext Windows account logins and passwords, along with many other features that make it useful for testing the security of networks. (Citation: Deply Mimikatz) (Citation: Adsecurity Mimikatz Guide)

Platforms: Windows

▪Techniques implemented (17)

T1555Credentials from Password StoresT1207Rogue Domain ControllerT1552.004Private KeysT1134.005SID-History InjectionT1547.005Security Support ProviderT1550.002Pass the HashT1098Account ManipulationT1555.003Credentials from Web BrowsersT1558.001Golden TicketT1003.002Security Account ManagerT1003.001LSASS MemoryT1558.002Silver TicketT1555.004Windows Credential ManagerT1003.004LSA SecretsT1550.003Pass the TicketT1649Steal or Forge Authentication CertificatesT1003.006DCSync

▪Used by groups (51)

G0082APT38G0119Indrik SpiderG1043BlackByte
S0002 on MITRE ATT&CK →
G0093GALLIUM
G0094Kimsuky
G1017Volt Typhoon
G0096APT41
G0035Dragonfly
G0045menuPass
G0050APT32
G0069MuddyWater
G0037FIN6
G0077Leafminer
G0046FIN7
G0034Sandworm Team
G0129Mustang Panda
G1015Scattered Spider
G0087APT39
G1024Akira
G0049OilRig
G0008Carbanak
G0004Ke3chang
G0006APT1
G0079DarkHydrus
G0108Blue Mockingbird
G0010Turla
G0092TA505
G0016APT29
G0114Chimera
G0003Cleaver
G1051Medusa Group
G0060BRONZE BUTLER
G0088TEMP.Veles
G0135BackdoorDiplomacy
G0107Whitefly
G1030Agrius
G0007APT28
G1023APT5
G0131Tonto Team
G1006Earth Lusca
G0076Thrip
G1004LAPSUS$
G0080Cobalt Group
G0102Wizard Spider
G1040Play
G1001HEXANE
G0059Magic Hound
G0027Threat Group-3390
G0064APT33
G1016FIN13
G0011PittyTiger

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.