🆕 Dump Notepad++

Warning

You need at least local admin privilege on the remote target, use option --local-auth if your user is a local account

Finding credentials in text files never happens, right? Right??

Well, even typing in sensible content into unsaved notepad++ documents can be dangerous, as they still leave traces on the system. This module dumps currently unsaved notepad++ documents:

nxc smb <ip> -u <USERNAME> -p <PASSWORD> -M notepad++

Dumping unsaved notepad++ documents