Mimikatz
Post-exploitation tool for Windows. Extracts passwords, hashes, Kerberos tickets from the LSASS process memory. Benjamin Delpy ("gentilkiwi"), 2011. Loved by red teams, hated by blue teams.
Originally written as a French hobby project to demonstrate that Windows stored passwords in cleartext in memory. Microsoft has patched gradually but the cat-and-mouse game continues. Techniques: pass-the-hash, pass-the-ticket, overpass-the-hash, golden ticket (forge TGT), silver ticket (forge TGS). Standard part of pentest frameworks (Cobalt Strike, Metasploit). Defenders: LSA Protection, Credential Guard, monitoring of LSASS reads.