Low Hanging Passwords

  1. Enumerate password on windows
  2. Enumerate password on linux

Enumerate password on windows

dir /b /a /s c:\ > cdirs.txt

After downloading .txt file to the attackers machine open it.

Parse for keywords
command: type cdirs.txt | findstr /i passw
After finding interesting file or directory
command: type c:\Users\Fred\Documents\passwords.txt

One thing to remember is we only enumerated the c:\ drive on the pc. There could be other network drives.

Enumerate password on linux

We gonna search in /etc for the word password
It could also be in /home or /var for the word pwd

grep --color=auto -rnw '/etc' -ie "password" --color=always 2> /dev/null