Skip to main content
CPEBuddy
How to Extract Plaintext Wi-Fi Passwords (with Rust)

How to Extract Plaintext Wi-Fi Passwords (with Rust)

Source: YouTube · John Hammond · published Jan 31, 2024 · 33:28

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

Windows stores Wi-Fi passwords in clear text that can be extracted with a custom Rust tool to avoid detection by EDR systems 0:00.

Key Takeaways:
• Windows saves all Wi-Fi network passwords in clear text, accessible via the netsh command 0:24
• Using netsh directly would trigger EDR detection, necessitating a more sophisticated approach 0:38
• The implementation uses the WLAN_PROFILE_GET_PLAINTEXT_KEY flag to extract passwords in clear text 23:30
• The Rust tool successfully extracts Wi-Fi passwords without creating detectable processes 31:54

This Rust-based approach provides penetration testers with a stealthy method to extract Wi-Fi passwords from Windows systems 32:24.

Sources:

  • 0:00 Introduction to Windows Wi-Fi password storage
  • 0:24 Using netsh to retrieve Wi-Fi passwords
  • 0:38 EDR detection concerns
  • 23:30 Extracting plain text passwords with API flags
  • 31:54 Successful execution of the Rust tool
  • 32:24 Benefits of the Rust implementation approach

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Here's a fun fact for you. Your Windows operating system actually stores your wireless network and Wi-Fi passwords in clear text. That's right. Whenever you remember a network or save a connection, the password gets stored and saved in a way that anyone could retrieve if they had access to your computer. It's not encrypted. It's not protected. It is readily available. In fact, it can be retrieved with just a single command. Just on the command prompt, you can type in netsh, hey Wi-Fi profiles, and get a clear text password. Now, say if you were an ethical hacker or a penetration tester, this could be some worthwhile and juicy information, but you can't just as easily call out to netsh or those Windows command line tools cuz that'll probably get detected. Even if you tried to bundle it up i…