Credentials export decrypted


#1

Hello All, I’m wanting to know if there is a way to export saved scan credentials and view the credentials. The export xml seems to only have the username but no password in the xml file.

Thanks in advance.


#2

This is not simple, normally a private / public key set is generated and stored at the key-ring the first time boot a GSM. All credentials are saved encrypted within the database. You can do a database export, export the private key to a 2nd system and try to decrypt the credentials.


#3

Hi agree with Lukas on this one.
The credentials you have entered to run an authenticated scan are there for only that purpose. To be used for the authenticated scan.

An XML export would only export the raw contents of your results, and wont include things like the scan configuration/credentials etc as they are not a result I would presume?

Whats the background to needing the credentials exported?