> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/windows-privilege-escalation/initial-enumeration-manual/password-hunting.md).

# Password Hunting

## Passwords in the Registry

```powerquery
reg query "HKLM\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon"
```

```powerquery
reg query HKLM /f password /t REG_SZ /s
reg query HKCU /f password /t REG_SZ /s
```

## Passwords in Files

```
findstr /si password *.txt
```

```
findstr /si password *.txt *.ini *.config *.xml
```