Password Hunting

Passwords in the Registry

reg query "HKLM\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon"

reg query HKLM /f password /t REG_SZ /s
reg query HKCU /f password /t REG_SZ /s

Passwords in Files

findstr /si password *.txt

findstr /si password *.txt *.ini *.config *.xml