[ra1d]

How to extract passwords from WiFi's you've connected to on Windows

Open up CMD or Windows PowerShell with Administration permissions.


#step1
We want to list the wireless networks that the computer has connected to.
We can do that by going into netsh, type netsh in the terminal.
Then type the following

Code

wlan show profiles

#step2
Now we want to export the profile that we are interested in.
NOTE: If the WiFi name contains spaces then make sure to write the profile name in quotation marks.

Code

wlan export profile %ProfileName% folder=c:\sampleDirectory

Now you when you've exported the profile you will see that the password is encrypted if you open it in a text editor.

Let's fix this by adding key=clear to the end of that command.
So it will look like this:

Code

wlan export profile %ProfileName% folder=c:\sampleDirectory key=clear

#step3
Use the following command to import the profile on new computers.

Code

wlan add profile filename="%PathAndFileName%" user=all

#step4
You've now acquired the password to your WiFi, it will be located inside the .xml file that is exported.
It can be found under <keyMaterial>passwordHere</keyMaterial>

Save your wireless network profiles and setup your new computer in no time with a quick Batch script, or whatever you decide to write a script in.
Very useful for IT technicians, operations, etc...

Simple but very neat to have.
Also it doesn't work for all WiFi's, some have different authentication methods.

[s‌hane]

Thanks for the tutorial, gonna try it now. :)

[TopKekeroni]

Very useful tutorial, thanks for sharing this with us!

[Phil]

Very simple and easy to follow, can be very useful for many purposes.

Spoiler (Click to View)

[ra1d]

Very simple and easy to follow, can be very useful for many purposes.

Spoiler (Click to View)

It definitely can be useful for a lot of things.
Glad you liked it.

[Lufasu]

Amazing tutorial ra1d :D now i can do cool stuff

[Craze*]

So my neighbour was RATed by me one month ago and now i will find his WiFi pass and have for a long time free wifi

Thanks :D

[DroidX]

Thanks man🤝 Nice toutorial

[ra1d]

Glad to hear you peeps enjoyed this tutorial.
I'll be releasing some more PowerShell tutorials soon. :-)

[HackRain]

-Added to sticky.

Tested and working on win10 enterprise.

[Stendoh]

wow I must be too stupid to do this tbh

[Ѕeptic]

Another HQ thread from rai1d. I'm sure a lot of people will benefit from this tutorial.

[ra1d]

Thanks for the feedback.
Do not hesitate to contact me if you have a question or want something explained.

[TheMockingBird]

Hmmm well very nice tutorial. 👍

But can't we access to the password in plain text trough the network card status --> wireless properties --> security and then show password ? :(

[ra1d]

Hmmm well very nice tutorial. 👍

But can't we access to the password in plain text trough the network card status --> wireless properties --> security and then show password ? :(

This allows for IT technicians, penetration testers and likewise to write scripts that can automate the process.

Also in case you're using a shared computer for example at a library, you will see all the WiFi profiles.
There's a lot of uses, those are only some of them.