README.md
March 14, 2026 · View on GitHub
🔑 Credential Dumping for Pentesters
A practical credential dumping reference and cheat sheet designed for red teamers, penetration testers, and cybersecurity learners to understand how credentials can be extracted from compromised systems during post-exploitation.
🌐 Connect With Us
🔵 Telegram – Join Channel
⚫ Twitter/X – Follow Us
🟣 Discord – Join Server
💼 LinkedIn – Follow HackingArticles
🎓 Training Program
🚀 Join Our Cybersecurity Training Program
Hands-on training in Penetration Testing, Red Teaming, and Cybersecurity.
🔑 Credential Dumping Techniques
| # | Topic | Description | Article |
|---|---|---|---|
| 1 | 📶 Wireless | Extract stored wireless credentials from compromised systems | Read Article |
| 2 | 🗂️ Group Policy Preferences (GPP) | Dump passwords stored in Group Policy Preferences | Read Article |
| 3 | 🔐 Windows Credential Manager | Extract credentials stored in Windows Credential Manager | Read Article |
| 4 | 🧠 WDigest | Dump cleartext credentials from WDigest authentication protocol | Read Article |
| 5 | 🛠️ Security Support Provider (SSP) | Extract credentials via SSP injection techniques | Read Article |
| 6 | 💾 SAM | Dump password hashes from the Windows SAM database | Read Article |
| 7 | 📦 Installed Applications | Extract credentials stored by installed applications | Read Article |
| 8 | 🗄️ NTDS.dit | Dump Active Directory credentials from NTDS.dit database | Read Article |
| 9 | 🎣 Phishing Windows Credentials | Capture Windows credentials using phishing techniques | Read Article |
| 10 | 🧬 Local Security Authority (LSA/LSASS) | Extract credentials directly from LSASS process memory | Read Article |
| 11 | 📋 Clipboard | Capture sensitive credentials copied to the clipboard | Read Article |
| 12 | 🔄 DCSync Attack | Simulate a domain controller to dump AD credentials | Read Article |
| 13 | 🔑 LAPS | Extract Local Administrator Password Solution credentials | Read Article |
| 14 | 🧾 Domain Cache Credential | Dump cached domain credentials from Windows systems | Read Article |
| 15 | ⚙️ Fake Services | Use malicious services to capture credentials | Read Article |
| 16 | 🔓 Windows Autologon Password | Extract plaintext autologon passwords from registry | Read Article |
| 17 | 🧠 Internal Monologue | NTLM downgrade attack to retrieve cleartext credentials | Read Article |
| 18 | 🔁 Reversible Password Encryption | Dump passwords stored using reversible encryption in AD | Read Article |
| 19 | 🧾 GMSA | Extract Group Managed Service Account passwords | Read Article |
| 20 | 📝 AD User Comment | Discover credentials stored in Active Directory user comments | Read Article |
