NavicatPwn
NavicatPwn is a post-exploitation framework designed to extract and decrypt database credentials saved in Navicat Premium. This tool is particularly useful in internal penetration testing scenarios where access to database credentials is crucial for further exploitation.
Key Features:
- Registry Extraction: Automatically reads and decrypts database credentials stored in the Windows registry for various Navicat versions.
- Connection File Decryption: Supports decryption of database credentials from exported Navicat connection files (.ncx).
- Manual Password Decryption: Allows users to manually decrypt specific passwords saved in Navicat Premium.
- Compatibility: Works with Navicat versions V11 and V12 and later.
Benefits:
- Efficiency: Streamlines the process of credential extraction, saving time during penetration tests.
- User-Friendly: Simple command-line interface for ease of use.
- Open Source: Available on GitHub for modification and contribution by the community.
Highlights:
- The tool is designed for ethical hacking and security research, ensuring users understand the legal implications of its use.
- A disclaimer is provided to inform users of their responsibilities when using the tool.
