Get Stored Passwords From the Windows Credential Manager

Description

Retrieves plaintext username and password combinations stored in the Windows Credential Manager.

Overview

Leverages the CredentialManager.dll to extract plaintext credentials.

Dependencies

  • CredentialManager
  • PSCredentialManager.Common
  • PSCredentialManager.Api
  • .NET 4 or higher

Operating Systems

  • Windows

Pre-Requisites

  • High Integrity process.

Example Output

[
  {
    "Password": "gho_Z5DRvcX4eEP2MnGNCwZnyl78OiFwUHomLzIj",
    "Username": "hax0r"
  },
  {
    "Password": "thisismypassword",
    "Username": "hax0r"
  }
]

Scroll to Top