Cmdkey.md

UPDATE BOOKMARKS - PROJECT MOVED TO A DEDICATED PROJECT SITE. THIS SITE WILL NOT BE UPDATED ANYMORE, BUT WILL BE KEPT FOR HISTORICAL REASONS.

New site: https://github.com/LOLBAS-Project/LOLBAS Web portal: https://lolbas-project.github.io/

Cmdkey.exe

• Functions: Credentials

cmdkey /list

Acknowledgements: *

Code sample: *

Resources:

• https://www.peew.pw/blog/2017/11/26/exploring-cmdkey-an-edge-case-for-privilege-escalation

Full path:

c:\windows\system32\cmdkey.exe
c:\windows\sysWOW64\cmdkey.exe

Notes:

Detection: