Enumerate password on windows
dir /b /a /s c:\ > cdirs.txt
After downloading .txt file to the attackers machine open it.
Parse for keywords
command: type cdirs.txt | findstr /i passw
After finding interesting file or directory
command: type c:\Users\Fred\Documents\passwords.txt
One thing to remember is we only enumerated the c:\ drive on the pc. There could be other network drives.
Enumerate password on linux
We gonna search in /etc for the word password
It could also be in /home or /var for the word pwd
grep --color=auto -rnw '/etc' -ie "password" --color=always 2> /dev/null