Capturing Credentials

Engagement Credentials Tab

All Engagement Credentials can be managed from the Credentials tab.

Host Credentials Section

Host Specific Credentials

Port Credentials Section

Port Specific Credentials

Adding Credentials Manually

From the Credentials Tab or Host Page, click the Add Creds button in the Credentials section:

Host Page - Credentials Section

Add Credentials

All fields are optional. Set the Host field to a specific host, for example web logins are typically tied to a web server. You can also attach credentials to the Engagement for domain wide credentials such as Active Directory NTLM hashes.

Importing Credentials

From the Credentials Tab or Host Page, click the Import Creds button in the Credentials section.

Import Creds

Import credentials by loading a file or copy & paste. The formats supported are:

• passwd

• .shadow

• username : password

• username : hash

• username : hash : hashtype

Exporting Credentials

Export Creds

The Export Creds screen provides an listing of captured credentials in various formats. These are meant to be copy & pasted into a file for use by hashcat, crackMapExec, or other tools.

Tier Availability

Credentials are available on all tiers.