These are some interesting registries to look for
reg query "HKCU\\Software\\ORL\\WinVNC3\\Password"
reg query "HKCU\\Software\\TightVNC\\Server"
reg query "HKCU\\Software\\SimonTatham\\PuTTY\\Sessions"
reg query "HKCU\\Software\\OpenSSH\\Agent\\Keys"
reg query HKLM /f password /t REG_SZ /s
reg query HKCU /f password /t REG_SZ /s
First: Query some registry files
reg query "HKCU\\Software\\SimonTatham\\PuTTY\\Sessions"

Second: Query The Saved Session
reg query "HKEY_CURRENT_USER\\Software\\SimonTatham\\PuTTY\\Sessions\\local"

Notice that we got the username and the password!
Query any registry that has the word password
reg query HKCU /f password /t REG_SZ /s

Notice that we got the Password we found earlier
Now let’s search for another word
reg query HKCU /f credential /t REG_SZ /s
