WinSCP

This module iterates through the registry and identifies WinSCP session information, attempts to decrypt it and shows the plaintext session information.

For each system output is stored in $pwd\PME\PME\WinSCP\

Usage

Standard execution

PsMapExec [Method] -targets All -Module WinSCP -ShowOutput

Optional Parameters

1) Displays each target output to the console

-ShowOutput

2) Display only successful results

-SuccessOnly

Supported Methods

MSSQL
SMB
SessionHunter (WMI)
WMI
WinRM

PreviousWi-Fi NexteKeys

Last updated 8 months ago

hashtagWinSCP

hashtagUsage

hashtagStandard execution

hashtagOptional Parameters

hashtag1) Displays each target output to the console

hashtag2) Display only successful results

hashtagSupported Methods