Tagged: Remote Credential Guard

January 12, 2026

LSASS-Free Larceny: Extracting NTLMv1 Hashes with DumpGuard BOF

DumpGuard BOF Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems. This repository contains a Beacon Object File (BOF) implementation of DumpGuard, ported from the original C#/.NET implementation to...

Open Source Tool

December 10, 2025

DumpGuard Tool Bypasses Credential Guard to Steal NTLMv1 Hashes

DumpGuard is a credential dumping tool that can extract the NTLMv1 hashes of users on modern Windows systems. The tool relies on the Remote Credential Guard protocol, and allows credential dumping even when Credential Guard is enabled on...