MimiRust - Hacking the Windows operating system to hand us the keys to the kingdom with Rust.

Last update: Nov 29, 2022

Overview

MimiRust - Hacking the Windows operating system to hand us the keys to the kingdom with Rust.

MimiRust is a program based on the wdigest attack vector implementation employed within Mimikatz. MimiRust has been made to extract the current users Windows password out of memory. Also like the name suggests MimiRust has been made in the Rust language.

Which operating systems does MimiRust support

It supports the following operating systems:

Win7 x64
Windows Server 2008 x64
Windows Server 2008R2 x64
Win8 x64
Windows Server 2012 x64
Windows Server 2012R2 x64
Win10_1507(and before 1903) x64

Note: out of some tests it turned out that it does not dump credentials with some of the above operating systems. (however on other installations of the same operating system it did.)

Why was MimiRust made

I was bored in my first year of my CyberSecurity bachelors, as there wasn't anything cyber related being taught. Thus I decided I was going to start my own project, I already knew of Mimikatz for a while and why it was used however I did not know how it did it's thing, so to get this knowledge I decided to start learning how it does it's thing and thus mimiRust was created.

Future plans

For the future I want to add more functionality/capability to MimiRust (like getting NTLM hashes) so it can be fully employed inside of redteam operations.

MimiRust - Hacking the Windows operating system to hand us the keys to the kingdom with Rust.

Related tags

Overview

MimiRust - Hacking the Windows operating system to hand us the keys to the kingdom with Rust.

Which operating systems does MimiRust support

Why was MimiRust made

Future plans

Demo

You might also like...

Checks whether the process is running as root/sudo/admin permission in Windows and Unix systems

Single stub direct and indirect syscalling with runtime SSN resolving for windows.

A small oscilloscope UI for the Owon HDS series portable oscilloscopes (Windows 10+, x86_64 only)

A cryptographically verifiable code review system for the cargo (Rust) package manager.

Rust implementation of the H3 geospatial indexing system.

Secure sandboxing system for untrusted code execution

A private network system that uses WireGuard under the hood.

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. 👻🐚

Cross-platform async library for system information fetching 🦀

Owner

Thotty

Memory hacking library for windows.

Bottlerocket - An operating system designed for hosting containers

OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

A Rust program to control bias lighting on Linux and Windows.

Attempts to suspend all known AV/EDRs processes on Windows using syscalls and the undocumented NtSuspendProcess API. Made with <3 for pentesters. Written in Rust.

Binary coverage tool without binary modification for Windows

Rapidly Search and Hunt through Windows Event Logs

A tiny program that locates and extracts public save files from Windows to your local directory!

Rslide - A web service that allows you to move through multiple html pages in the browser like a slide, even without focusing on the app console or the browser. Currently only supports Windows.