Files that contains passwords

Search for files containing passwords. First list all files:

CMD:

dir /b /a /s c:\\ >> files.txt

• /b - Displays a bare list of directories and files, with no additional information.
• /a - Not sure
• /s - Lists every occurrence of the specified file name within the specified directory and all subdirectories.

PowerShell:

Get-Childitem -Path C:\\ -Include *pass* -Recurse -ErrorAction SilentlyContinue

Also can do gci instead of Get-Childitem

REMEMBER also to look at network shares and other drives

Then search for files with the word password:

type files.txt | findstr /i passw

Registry Keys

Search for registry keys that contain passwords

reg query HKLM (/HKCU) /f password /t REG_SZ

Some software have password embedded in the settings for example VNC

reg query "HKCU\\Software\\ORL'WinVNC3\\Password