creds

Harvest credentials, tokens, and secrets from target systems.

482|68|Updated Sep 5, 2023
One-click install
npx skills add https://github.com/chainreactors/malice-network --skill creds
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: creds
Source: https://github.com/chainreactors/malice-network/tree/main/helper/intl/community/resources/skills/creds
Command: npx skills add https://github.com/chainreactors/malice-network --skill creds

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Harvest credentials, tokens, and secrets from a target system to support remediation and security assessments.

Core Features & Use Cases

  • Discover credentials in SSH configs, cloud credentials, git configs, environment files, and application configs.
  • Produce structured findings including source, type, and masked values to aid risk assessment.
  • Use in incident response and red-team exercises to quickly map credential exposure.

Quick Start

Run the creds skill against the target to enumerate credentials across common locations.

Frequently Asked Questions about creds

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harvest credentials and secrets from environment variables and config files?

To harvest credentials from environment variables and config files, you need a tool that performs read-only collection across target systems to map credential exposure. This skill automates that discovery process across SSH, git, cloud, and application configs.

What is the best way to discover exposed cloud credentials during incident response?

Discovering exposed cloud credentials during incident response requires scanning known locations like cloud profiles. This skill performs read-only collection to identify tokens and secrets, reporting the source, type, and masked values to aid risk assessment.

Can I collect SSH and git credentials without modifying the target system?

Yes, you can collect SSH and git credentials without modifying the target system. This skill performs read-only collection of sensitive credentials from configuration files, ensuring the target environment remains unchanged during security assessments.

How are discovered secrets and tokens reported for forensic analysis?

Discovered secrets and tokens are reported in a structured format detailing the source, type, and masked values. This output aids risk assessment and helps security teams quickly map credential exposure across the target system.

Does credential harvesting work for application configs and environment files?

Yes, credential harvesting works for application configs and environment files. The skill enumerates credentials across common locations including environment files, cloud profiles, SSH configs, and application configurations to support remediation and security assessments.