Mimikatz
Post ExploitationkaliWindows credential extraction classic. Often used via Metasploit or wine on Kali for research labs.
Install
sudo apt install mimikatz
Common commands
privilege::debug sekurlsa::logonpasswords
Use only on systems you are authorized to test. Follow program scope.
Related tools
CrackMapExec
Swiss army knife for pentesting Active Directory networks (now NetExec in many repos).
Empire
Post-exploitation framework with PowerShell and Python agents (check current maintained forks).
LinPEAS
Linux privilege escalation enumeration script. Find misconfigs quickly on compromised hosts.
Netcat
Swiss army knife of networking — debug, transfer files, and simple reverse shells (lab).