discovered 03 Aug 2026
pywhisker
→ View on GitHubpyWhisker is a Python tool designed to manipulate the `msDS-KeyCredentialLink` attribute of user or computer accounts in a Windows domain, facilitating exploitation of "Shadow Credentials." It allows users to list, add, remove, and export KeyCredentials, and supports multiple authentication methods including NTLM and Kerberos variations. Noteworthy features include its integration with Impacket and PyDSInternals, and the capability to perform actions based on specific domain functional prerequisites.