Penetration Small helper--several password collection tools

This article was transferred from 360 security broadcast

In penetration testing, especially in the intranet infiltration, the collection of passwords is what the infiltration division must do. Today, I would like to recommend a few useful tools to collect passwords. Of course, these tools can not only be used in infiltration, in real life can sometimes help us.

Webbrowserpassview

As the name implies, this is a tool to read the password stored in the browser. The tool now supports reading ie4.0~11.0, Firefox full version, Chrome, Safari and Opera browser passwords. And you can easily export it as a text/html/csv/xml file.

：

Http://www.nirsoft.net/toolsdownload/webbrowserpassview.zip

Mail Passview

This is a tool that reads passwords from mail clients, and currently supports clients with:

Outlook Express

Microsoft Outlook (POP3 and SMTP accounts)

Microsoft Outlook 2002/2003/2007/2010/2013 (POP3, IMAP, HTTP, and SMTP accounts)

Windows Mail

Windows Live Mail

IncrediMail

Eudora

Netscape 6.x/7.x

Mozilla Thunderbird

Group Mail Free

Yahoo! Mail

HOTMAIL/MSN Mail

Gmail

The tool supports a full version of the Windows operating system.

：

Http://www.nirsoft.net/toolsdownload/mailpv.zip

Remote Desktop Passview

He can read the Remote Desktop password saved in the. rdp file.

：

Http://www.nirsoft.net/toolsdownload/rdpv.zip

Messenpass

He can read the passwords stored in some social software clients. The currently supported clients are:

MSN Messenger

Windows Messenger (Supports dows XP only)

Windows Live Messenger (supports ndows XP/VISTA/7 only)

Yahoo Messenger (Versions 5.x and 6.x)

Google Talk

ICQ Lite 4.x/5.x/2003

AOL Instant Messenger

Trillian

Trillian Astra

Miranda

Gaim/pidgin

MySpace IM

PaltalkScene

Digsby

：

Http://www.nirsoft.net/toolsdownload/mspass.zip

Penetration Small helper--several password collection tools