Credential Hunting
History files
env
cat .bashrcCredential Harvesting
grep -R db_passwd
grep -roiE "password.{20}"
grep -oiE "password.{20}" /etc/*.conf
grep -v "^[#;]" /PATH/TO/FILE | grep -v "^$" // grep for passwords like "DBPassword:"
watch -n 1 "ps -aux | grep pass"
sudo tcpdump -i lo -A | grep "pass"Locally Stored Credentials
Search for credentials by trying various options like username, password, db_username, db_password, db_user etc.
grep -nr "username"
grep -nr "upassword"Mozilla Firefox files
We can decrypt the protected passwords using direpwd:
Last updated