🆕Dump Notepad

Dump unsaved Notepad documents

You need at least local admin privilege on the remote target, use option --local-auth if your user is a local account

Finding credentials in unsaved Notepad files.

Sensible content into unsaved notepad documents can be dangerous, as they still leave traces on the system. This module dumps currently unsaved notepad app's documents:

nxc smb <ip> -u username -p password -M notepad

Extract credentials from (unsaved) notepad files