Credentials Harvesting

• https://www.synacktiv.com/publications/windows-secrets-extraction-a-summary

Tools

SessionGopher

• https://github.com/Arvanaghi/SessionGopher

PS > Invoke-SessionGopher -Thorough

Gopher

• https://github.com/EncodeGroup/Gopher

LaZagne

• https://github.com/AlessandroZ/LaZagne

Cmd > .\lazagne.exe all [-v]
Cmd > .\lazagne.exe windows [-v]