Red Team Notes 2.0

Introduction
Red Team
Red Team Techniques
Active Directory
- Active Directory
- Active Directory Attacks
Red Team Infrastructure
Situational Awareness
- Covenant and C#
- Empire and PowerShell
Credential Dumping
Persistence
- Userland Persistence
- Elevated Persistence
Defense Evasion
- Disable or Modify Tools
- Obfuscating Files
Privilege Escalation
- PowerUp
- PrivescCheck
Lateral Movement
- RDP
- PowerShell Remoting
Files
- Red Team Guide

Powered by GitBook

On this page

Was this helpful?

Credential Dumping

SharpChromium

PreviousLsass Dumping NextPersistence

Last updated 2 years ago

SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently, it can extract:

Cookies (in JSON format)
History (with associated cookies for each history item)
Saved Logins

A small demonstration of saved credentials for the Edge Web Browser, these can be extracted with user-level permissions

(Heads up!!!, The credentials can be stored even if incorrect!!!)