16

I have a list of credentials stored in my Windows Credential Manager. But I can't view those passwords. Is there any way to see those credentials?enter image description here

Kunal
  • 1,899

7 Answers7

4

You could try Network Password Recovery tool from Nirsoft

Enigman
  • 775
3

Windows has increased the security of passwords.

If you're in the "Windows Credentials" section of the Credential Manager, and if you expand any credential using the arrow, you'll find that asterisks are shown instead of the passwords, and I found no way to convince Windows to show the password itself on my computer.

If you open PowerShell and attempt to get the credential of some user using the Get-StoredCredential command, Windows will ask for the password of that account, which sort of defeats the purpose of getting the password.

To get at some of the passwords requires the Nirsoft program of CredentialsFileView, which can show most but not all passwords, but it requires entering the Windows login password into the program. I suggest sorting by the column of "Entry Type" in order to sort by password type. The interesting ones probably have the Entry Type of "Domain Password".

enter image description here

harrymc
  • 498,455
2

If you are a developer you could take advantage of this library to find your stored Windows Credentials. https://github.com/spolnik/Simple.CredentialsManager

Amadeus Sanchez
  • 253
1

For python see the keyring module (link) e.g:

pip install pywin32 keyring
python -c "import keyring;print(keyring.get_password('servicename', 'username'))"
sparrowt
  • 2,711
fakej Gazeta.pl
  • 19
1

You could try to crack the passwords with mimikatz(GitHub):

  1. Download the ZIP file from the release page or from here
  2. Place it onto C: and extract the content
  3. Open powershell as an admin
  4. cd into the folder where the executable mimikatz.exe is placed
  5. Start mimikatz with mimikatz.exe
  6. Run these commands:
privilege::debug
token::elevate
sekurlsa::logonPasswords
  1. After these commands you get a list of credentials and there you should find your desired passwords.
Sator
  • 113
0

Here's a single .cs file to print the password of a generic credential: https://github.com/KirillOsenkov/Misc/blob/c2e28fb9e37b7d115bead10a0bc7bfce5e1e4375/WindowsCredentialViewer.cs

I'm not redistributing a binary since reading credentials is a dangerous thing and you should verify what you run before you download a tool from the internet to read your passwords. Just add that single C# file to a new C# console app and run.

Kirill Osenkov
  • 109
0

There is one more solution 1st get the list of the entries in Windows Credentials using simple power shell command

cmdkey /list | ForEach-Object { $_ }

find there the required entry and use the value from field Target in this python script

import win32cred

target = "target_value"
creds = win32cred.CredRead(target, win32cred.CRED_TYPE_GENERIC)
print("Username:", creds['UserName'])
print("Password:", creds['CredentialBlob'].decode()
Vilen Sharifov
  • 1