Skip to content

Credential Management ​

Manage user credentials defined as YAML blocks in Markdown files, with export in multiple pentest tool formats.

How It Works ​

Add YAML blocks annotated with credentials identity in Markdown files under users/ directories:

markdown
```yaml credentials
- user: administrator
  password: P@ssw0rd123
  login: CORP
  is_current: true
  props: {}

- user: svc_backup
  nt_hash: 5fbc3d5fec8206a30f4b6c473d68ae76
  login: CORP
  is_current: false
  props: {}
```

Credential Fields ​

FieldTypeDescription
userstringUsername
passwordstringPassword (mutually exclusive with nt_hash)
nt_hashstringNTLM hash (mutually exclusive with password)
loginstringLogin domain or context
is_currentbooleanCurrently active credential
propsobjectCustom properties

Commands ​

CommandIDDescription
Switch/Set current userweapon.switch_userSet active credential across all files
List/Dump all usersweapon.dump_usersDisplay credentials in chosen format

Export Formats ​

Impacket format:

bash
'CORP'/'administrator':'P@ssw0rd123'
'CORP'/'svc_backup' -hashes ':5fbc3d5fec8206a30f4b6c473d68ae76'

NetExec (nxc) format:

bash
'CORP' -u 'administrator' -p 'P@ssw0rd123'
'CORP' -u 'svc_backup' -H ':5fbc3d5fec8206a30f4b6c473d68ae76'

CodeLens Actions ​

On credential YAML blocks:

  • export to terminal / export as current
  • dump as impacket / dump as nxc
  • set as current / unset as current

Key Files ​

  • src/features/targets/commands/switchUser.ts
  • src/features/targets/commands/dumpUsers.ts
  • src/features/targets/codelens/yaml/dumpProvider.ts