---
id: blacklanternsecurity/red-run/windows-credential-harvesting
version: "6272ab88"
license: GPL-3.0
install: manual
updated: 2026-04-01
---

# Windows Credential Harvesting — Locate and extract credentials cached on Windows systems through registry queries, file searches, shadow copies, and DPAPI decryption. Covers browser passwords, saved sessions, unattend files, and vault entries accessible without domain access.

Publisher: blacklanternsecurity · Stars: 241 · Updated: 2026-04-01

Install (manual): `git clone https://github.com/blacklanternsecurity/red-run`

*Unlicensed repository - metadata only, no file contents reproduced.*

[View on SkillFed](https://skillfed.io/blacklanternsecurity/red-run/windows-credential-harvesting) · [View on GitHub](https://github.com/blacklanternsecurity/red-run)