Mimikatz

A widely used post-exploitation tool that extracts credentials from Windows memory and authentication artifacts, infamous for retrieving plaintext passwords, hashes, and Kerberos tickets that attackers use to escalate and move laterally.