Initial Enumeration Manual Password Hunting

Notes from oscp.adot8.com — windows privilege escalation.

#windows privilege escalation#adot8

Password Hunting

powerquery

01reg query "HKLM\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon"

powerquery

01reg query HKLM /f password /t REG_SZ /s
02reg query HKCU /f password /t REG_SZ /s

code

01findstr /si password *.txt

code

01findstr /si password *.txt *.ini *.config *.xml