Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

Get-BrowserData

Local Host Enumeration

Host Enumeration

Collection

Get-BrowserData is a Windows PowerShell function that reads selected browser history and bookmark data from Chrome, Internet Explorer, and Firefox profile files or registry locations. It returns matching URLs locally; the upstream script does not extract cookies, saved passwords, or browser login databases. Its Internet Explorer mode is not safely scoped by -UserName: history enumeration walks all currently loaded user hives, while Favorites enumeration scans user profile directories.

Source

https://github.com/rvrsh3ll/Misc-Powershell-Scripts/blob/6f23bb41f9675d7e2d32bacccff75e931ae00554/Get-BrowserData.ps1

Language

PowerShell

References

github.com attack.mitre.org learn.microsoft.com learn.microsoft.com

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER