Wi-Fi Post-Exploitation

Windows - WPA Personal

netsh wlan show profile <profile name> key=clear

Windows - WPA Enterprise

https://0x00-0x00.github.io/research/2018/11/06/Recovering-Plaintext-Domain-Credentials-From-WPA2-Enterprise-on-a-compromised-host.html

https://github.com/ash47/EnterpriseWifiPasswordRecover

Linux

/etc/NetworkManager/system-connections