Git Credential Helper Reconnaissance

Ibrahim Saud@tektrix

•updated Jun 17, 2026•0•0•1

Detects enumeration of git credential helpers via 'git config --global credential.helper'. This command is used by adversaries, such as Miasma, to determine how credentials are stored (e.g., wincred, osxkeychain, store) before attempting extraction.