vmemhashdump
C
★ 6
updated 1mo ago
Dump Windows local NTLM hashes straight from a raw VMware .vmem image, no Volatility, no Python, no dependencies.
No plain-English explanation yet — one is being written right now. Check back in a minute.