diff --git a/Offensive.md b/Offensive.md
index 36eb5cf..dcef331 100644
--- a/Offensive.md
+++ b/Offensive.md
@@ -2042,6 +2042,10 @@ Some tools can be categorized in more than one category. But because the current
CCob/MirrorDump |
Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory |
+
+ citronneur/pamspy |
+ Credentials Dumper for Linux using eBPF |
+
codewhitesec/HandleKatz |
PIC lsass dumper using cloned handles |