> For the complete documentation index, see [llms.txt](https://docs.pentest.ws/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pentest.ws/getting-started/capturing-credentials.md).

# Capturing Credentials

## Engagement Credentials Tab

<figure><img src="https://1013683115-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHecEAvxd6Z8cSug6DhWr%2Fuploads%2F5Cii1OGVyfBIU91VNpoz%2Fimage.png?alt=media&amp;token=bf4b2201-0a7c-4ab5-97ce-92fcd8cda48a" alt=""><figcaption></figcaption></figure>

The **Credentials** screen is used to manage usernames, passwords, and hashes discovered during an engagement. This central repository makes it easier to track, reuse, and report credentials across different hosts and services.

### Features

At the top of the screen you can:

* **Add Creds** – Manually add new credentials.
* **Import Creds** – Bulk import credentials from supported formats.
* **Export Creds** – Export the current list for offline use or reporting.
* **Clear Filters** – Reset any applied filters in the table.

A search bar is also available to quickly locate specific credentials.

### Credential Fields

Each row in the table represents a credential record with the following fields:

* **Host** – The system where the credential was identified.
* **Service** – The protocol or service (e.g., SMB, RDP, SSH).
* **Domain** – The associated domain or workgroup.
* **Username** – The account name.
* **Password** – The cleartext password, if known.
* **Hash** – A stored password hash, if captured.
* **Notes** – Any additional context (e.g., “Domain Admin”).

In the example shown:

* Host: `1.2.3.4`
* Service: `smb`
* Domain: `acme.local`
* Username: `administrator`
* Password: `password123`
* Hash: `218297e636...`
* Notes: `Domain Admin`

This structured view allows you to keep track of credentials across an engagement and ensure they are available for reuse during testing or reporting.

## Adding Credentials Manually

From the *Credentials* *Tab* or [Host Page](/hosts-and-services/host-page.md), click the *Add Creds* button in the *Credentials* section:

![Host Page - Credentials Section](https://1013683115-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHecEAvxd6Z8cSug6DhWr%2Fuploads%2FjP8bdzSW1v36990kA3JI%2Fimage.png?alt=media\&token=b3be9abd-8faf-4035-adee-e332c3c9d20e)

<figure><img src="https://1013683115-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHecEAvxd6Z8cSug6DhWr%2Fuploads%2FxE0jljX8ZxUulk5pZTPp%2Fimage.png?alt=media&amp;token=d0e1f49e-02c4-43d7-bc8a-aa4a708c2c90" alt=""><figcaption></figcaption></figure>

All fields are optional. Set the Host field to a specific host, for example web logins are typically tied to a web server. You can also attach credentials to the Engagement for domain wide credentials such as Active Directory NTLM hashes.

## Importing Credentials

From the *Credentials* *Tab* or [Host Page](/hosts-and-services/host-page.md), click the *Import Creds* button in the *Credentials* section.

![Import Creds](https://1013683115-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHecEAvxd6Z8cSug6DhWr%2Fuploads%2FsRx1OiIDlyFOxUSidiQs%2Fimage.png?alt=media\&token=68cd3e25-38fc-4c90-8915-912948e2ea4f)

Import credentials by loading a file or copy & paste. The formats supported are:

* passwd
* .shadow
* username : password
* username : hash
* username : hash : hashtype

## Exporting Credentials

![Export Creds](https://1013683115-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHecEAvxd6Z8cSug6DhWr%2Fuploads%2FhmLCIDFdSZfj9ol8y6oI%2Fimage.png?alt=media\&token=28d5cc42-3e9b-4478-b66c-b40a8016e14f)

The *Export Creds* screen provides an listing of captured credentials in various formats. These are meant to be copy & pasted into a file for use by hashcat, crackMapExec, or other tools.

## Tier Availability

**Credentials** are available on all tiers.