Skip to content

Enumerates MS-RDP connections and stored passwords on macOS

Notifications You must be signed in to change notification settings

luckman212/msrdp-credential-dumper

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

MS RDP Credential Dumper

This is a small program for macOS that retrieves and dumps out Microsoft Remote Desktop (rebranded as "Windows App" in Sep 2024) connections and their associated credentials, including the passwords (if they are saved in the Keychain).

The first time you run it, you may be prompted to enter your password so the security tool can access the Keychain item. If you choose Always Allow then you won't be prompted on subsequent runs. Do this only if you are confident of the security of the computer you're running the script on.

Instructions

  1. Clone this repo (click the green Code button above, then click Download ZIP).
  2. Unzip that file and copy msrdp-credential-dumper.sh to your $PATH somewhere. I suggest /usr/local/bin if you're unsure.
  3. Make sure the script is executable by issuing this command from a Terminal:
    chmod u+x /usr/local/bin/msrdp-credential-dumper.sh
  4. Run the script from a Terminal (see below)

Sample output

Related AskDifferent posts