windows-credential-harvesting

What problem does it solve?

This Skill helps security professionals discover and extract locally stored credentials on Windows systems, aiding in privilege escalation and lateral movement during authorized penetration tests.

Core Features & Use Cases

• Local Credential Discovery: Finds saved passwords in browsers, registry, command history, and DPAPI-protected stores.
• Exploitation Techniques: Leverages tools like Mimikatz, SharpDPAPI, and others to decrypt or extract sensitive information.
• Use Case: During a penetration test, an analyst can use this Skill to find cached Wi-Fi passwords or saved browser credentials on a compromised Windows host to gain access to other systems or user accounts.

Quick Start

Run the windows-credential-harvesting skill to find saved Wi-Fi passwords on the target system.