Credential Hunting

Gaining domain account credentials is a goal that most attackers want to accomplish during any offensive engagement. There are a few places where credentials, in plain text and password hashes, are stored in Windows. This section will cover a few of those places that are commonly searched.