Performing credential harvesting