Internal Infrastructure Pentest - Extracting Juicy Information from Registry

less than 1 minute read

  • reg query “HKCU\Software\ORL\WinVNC3\Password”
  • reg query HKEY_LOCAL_MACHINE\SOFTWARE\RealVNC\WinVNC4 /v password
  • reg query “HKCU\Software\SimonTatham\PuTTY\Sessions”
  • reg query HKLM /f password /t REG_SZ /s
  • reg query HKCU /f password /t REG_SZ /s
  • reg query “HKLM\SYSTEM\Current\ControlSet\Services\SNMP”
  • reg query “HKLM\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon”
  • reg query “HKEY_LOCAL_MACHINE\ SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ History” /v DCName