diff --git a/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Putty.cs b/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Putty.cs index 8ddbc18..7e4ef57 100644 --- a/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Putty.cs +++ b/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Putty.cs @@ -129,6 +129,24 @@ namespace winPEAS.KnownFileCreds else { string[] subKeys = RegistryHelper.GetRegSubkeys("HKCU", "Software\\SimonTatham\\PuTTY\\Sessions\\"); + RegistryKey selfKey = Registry.CurrentUser.OpenSubKey(@"Software\\SimonTatham\\PuTTY\\Sessions"); // extract own Sessions registry keys + + if (selfKey != null) + { + string[] subKeyNames = selfKey.GetValueNames(); + foreach (string name in subKeyNames) + { + Dictionary putty_sess_key = new Dictionary() + { + { "RegKey Name", name }, + { "RegKey Value", (string)selfKey.GetValue(name) }, + }; + + results.Add(putty_sess_key); + } + selfKey.Close(); + } + foreach (string sessionName in subKeys) { Dictionary putty_sess = new Dictionary()