Unsecured Credentials
Unsecured credentials are like leaving your house keys under the doormat or written on a sticky note on your front door. If someone breaks into your house, they can easily find these keys and use them to unlock other rooms or safes, giving them full access to your private belongings.
Unsecured credentials refer to sensitive authentication data, such as passwords, API keys, or tokens, that are stored in an unprotected state on a system. Adversaries exploit these by searching common locations like bash history, environment variables, or configuration files to escalate privileges or move laterally across a network.
Unsecured credentials represent a critical vulnerability where authentication artifacts are stored in plaintext or weakly protected formats within a compromised environment. Adversaries systematically enumerate these artifacts—including shell history files, environment variables, OS-level repositories like the Windows Registry, or application-specific key stores—to facilitate credential harvesting, unauthorized access, and persistence within the target infrastructure.