> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/creds/credential-access-introduction.md).

# Credential Access - Introduction

{% hint style="info" %}
Please note that this site is a continuous **work-in-progress!**
{% endhint %}

**Credential Access** consists of techniques for stealing credentials like account names and passwords. Techniques used to get credentials include keylogging or credential dumping. Using legitimate credentials can give adversaries access to systems, make them harder to detect, and provide the opportunity to create more accounts to help achieve their goals.

## Add a new local user

### Create user password

#### With openssl

```bash
openssl passwd -6 my_new_password
```

#### With mkpasswd

```bash
mkpasswd -m sha-512 my_new_password
```

## Resources

Credential Access (TA0006) - Mitre ATT\&CK: <https://attack.mitre.org/tactics/TA0006/>