Credentials

Use this as the jump page when you have a shell and need reusable credentials fast. Run the quick triage, then drop into the focused technique page that matches what you’re seeing.

Linux credential access techniques

Common locations to find credentials after gaining a shell:

• Shell history files for previously typed passwords
• Configuration files with hardcoded credentials
• Browser saved passwords and session tokens
• SSH private keys and agent sockets
• Environment variables and process memory