{"id":1133,"date":"2020-12-06T16:57:13","date_gmt":"2020-12-06T16:57:13","guid":{"rendered":"https:\/\/cybersecthreat.com\/?p=1133"},"modified":"2024-04-01T13:47:08","modified_gmt":"2024-04-01T05:47:08","slug":"retrieve-password-from-exe-part3","status":"publish","type":"post","link":"https:\/\/cybersecthreat.com\/zh\/2020\/12\/06\/retrieve-password-from-exe-part3\/","title":{"rendered":"Retrieve password from exe(3)"},"content":{"rendered":"

This article is part three of “Extract\/Dump\/Retrieve password from exe” series. Previously, we have discussed unpack\/decompile an executable back to script in part one<\/a> and dumping connection string credentials in part two<\/a>. In this article, we will explore how we can retrieve passwords from exe using other techniques and tools such as Process Monitor from Sysinternals<\/a> and debugger x64dbg<\/a>.<\/p>\n\n\n\n

In short, we are going to examine a sample application named LaunchProgram.exe<\/code> developed in Delphi, which aimed to perform a similar function as runas<\/strong> with embedded credentials. <\/p>\n\n\n