whoami
systeminfo
hostname
net users
net logalgroups
netsh firewall show state
netsh firewall show config
netstat -ano
schtasks /query /fo LIST /v
wmic qfe get Caption,Description,HotFixID,InstalledOn
findstr /si password *.txt
findstr /spin "password" *.*
findstr /si password *.xml
findstr /si password *.ini
#Buscar cadenas de texto en ficheros de configuración
dir /s *pass* == *cred* == *vnc* == *.config*
#autologin
reg query "HKLM\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon"
#putty
reg query "HKCU\Software\SimonTatham\PuTTY\Sessions"
#contraseñas
reg query HKLM /f password /t REG_SZ /s
reg query HKCU /f password /t REG_SZ /s
# VNC
reg query "HKCU\Software\ORL\WinVNC3\Password"
# Windows autologin
reg query "HKLM\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon"
# SNMP Paramters
reg query "HKLM\SYSTEM\Current\ControlSet\Services\SNMP"
# Putty
reg query "HKCU\Software\SimonTatham\PuTTY\Sessions"
wmic qfe get Caption,Description,HotFixID,InstalledOn