AWS Credentials Finder

This NetExec module is designed to search for files named "credentials" on remote servers running Windows. It is ideal for locating AWS configuration files in security environments, allowing quick identification of the paths where these critical files are stored.

Features:

• Scans Windows servers for files named credentials.
• Returns the full paths of the files found on the remote system.
• Perfect for security audits and penetration testing focused on AWS configuration.

Installation

git clone https://github.com/dev-fortress/aws-credentials.git  

cd aws-credentials  

cp aws-credentials.py /home/username/NetExec/lib/python3.12/site-packages/nxc/modules/  

Usage:

NetExec winrm IP-Address -u username -p password -M aws-credentials  
NetExec smb IP-Address -u username -p password -M aws-credentials  
NetExec ssh IP-Address -u username -p password -M aws-credentials  

NetExec winrm IP-Address -u username -p password -M aws-credentials -o SEARCH_PATH=C:\\Users\\username\\pruebas\\  
NetExec ssh IP-Address -u username -p password -M aws-credentials -o SEARCH_PATH=/home/username/  

Review the returned paths to analyze the files found.

Additional Resources

• Docs NetExec

License

This project is licensed under the MIT License. For more information, see the file. LICENSE.