> For the complete documentation index, see [llms.txt](https://ppn.snovvcra.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting.md).

# Credentials Harvesting

* <https://www.synacktiv.com/publications/windows-secrets-extraction-a-summary>

## Tools

### SessionGopher

* <https://github.com/Arvanaghi/SessionGopher>

```
PS > Invoke-SessionGopher -Thorough
```

### Gopher

* <https://github.com/EncodeGroup/Gopher>

### LaZagne

* <https://github.com/AlessandroZ/LaZagne>

```
Cmd > .\lazagne.exe all [-v]
Cmd > .\lazagne.exe windows [-v]
```