ATT&CKSoftwareMimiPenguin

MimiPenguin

S0179

Tool.View on attack.mitre.org

About this tool

MimiPenguin is a credential dumper, similar to Mimikatz, designed specifically for Linux platforms.

Techniques used1

Procedure examples1

TechniqueProcedure example
T1003.007
Proc Filesystem

MimiPenguin can use the `<PID>/maps` and `<PID>/mem` file to search for regex patterns and dump the process memory.

Groups that use it1

Campaigns0

None recorded.

References1

  1. MimiPenguin GitHub May 2017 Open source
    Gregal, H. (2017, May 12). MimiPenguin. Retrieved December 5, 2017.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.