PrivEsc - Clear Text passwords

-------------------------------------------------------------------------------
# find the full path for the important files

C:\> dir /b /s unattend.xml
C:\> dir /b /s web.config
C:\> dir /b /s sysprep.inf
C:\> dir /b /s sysprep.xml
C:\> dir /b /s *pass*
C:\> dir /b /s vnc.ini


-------------------------------------------------------------------------------
# find the keyword "password" in all files
findstr /spin "password" *.*

# discover files that contain the keyword "password" in the following extensions
findstr /si password *.txt
findstr /si password *.xml
findstr /si password *.ini

# Metasploit module to discover credentials via unattended installations
post/windows/gather/enum_unattend

-------------------------------------------------------------------------------
# find passwords stored in registry
reg query HKLM /f password /t REG_SZ /s
reg query HKCU /f password /t REG_SZ /s

-------------------------------------------------------------------------------

# meterpreter
post/windows/gather/credentials/gpp
post/windows/gather/enum_unattend