Search Credentials in Files

Search authorized local files and remote file shares for insecurely stored credentials, and decode the SSSD LDAP provider's ldap_default_authtok only when ldap_default_authtok_type is obfuscated_password. The independent paths are Gitleaks scans of local repository history or current file paths, NetExec search of one named SMB share, and the SSSD-specific configuration-token decoder. The SMB path can run from an external network only when the authorized SMB service and share are Internet-reachable; valid credentials and file-read access are still required. These procedures do not enumerate every credential store or validate recovered credentials. Treat matches, reports, and decoded output as sensitive.