:py:mod:`dissect.target.plugins.os.windows.credential.defaultpassword` ====================================================================== .. py:module:: dissect.target.plugins.os.windows.credential.defaultpassword Module Contents --------------- Classes ~~~~~~~ .. autoapisummary:: dissect.target.plugins.os.windows.credential.defaultpassword.DefaultPasswordPlugin Attributes ~~~~~~~~~~ .. autoapisummary:: dissect.target.plugins.os.windows.credential.defaultpassword.defaultpassword_def dissect.target.plugins.os.windows.credential.defaultpassword.c_defaultpassword dissect.target.plugins.os.windows.credential.defaultpassword.DefaultPasswordRecord .. py:data:: defaultpassword_def :value: Multiline-String .. raw:: html
Show Value .. code-block:: python """ struct DefaultPassword { DWORD length; char flags[4*3]; WCHAR data[length/2]; // char checksum_or_guid[0x10]; }; """ .. raw:: html
.. py:data:: c_defaultpassword .. py:data:: DefaultPasswordRecord .. py:class:: DefaultPasswordPlugin(target: dissect.target.target.Target) Bases: :py:obj:`dissect.target.plugins.os.windows.credential.credential.WindowsCredentialPlugin` Windows LSA DefaultPassword plugin. .. py:attribute:: __namespace__ :value: 'defaultpassword' Defines the plugin namespace. .. py:method:: check_compatible() -> None Perform a compatibility check with the target. This function should return ``None`` if the plugin is compatible with the current target (``self.target``). For example, check if a certain file exists. Otherwise it should raise an :class:`UnsupportedPluginError`. :raises UnsupportedPluginError: If the plugin could not be loaded. .. py:method:: defaultpassword() -> collections.abc.Iterator[DefaultPasswordRecord] Yield decrypted Windows LSA DefaultPassword records. Extracts decrypted ``DefaultPassword`` values from the LSA. .. rubric:: References - https://learn.microsoft.com/en-us/troubleshoot/windows-server/user-profiles-and-logon/turn-on-automatic-logon