One Day Sec

What built-in Windows command-line tools can be used to list credential information, and how do they differ?

Windows provides two built-in tools: `vaultcmd` and `cmdkey`. `vaultcmd` offers more detailed operations, such as listing vaults (`/list`), credential names with GUIDs (`/listschema`), and properties including file location and protection method (`/listproperties`). `cmdkey /list` simply lists all stored Windows credentials. Both are useful for initial reconnaissance during the post‑exploitation phase to identify available credentials.
vaultcmdcmdkeybuilt-in toolscredential enumerationpost-exploitation

Browse all Q&A →