This CHT Posted November 4, 2022 Group: The leader of the Content Count: 4,798 Achievement Points: 31,702 With Us For: 243 Days Status: Offline Last Seen: May 19 Device: Windows Share Posted November 4, 2022 # Exploit Title: MTPutty 1.0.1.21 - SSH Password Disclosure # Exploit Author: Sedat Ozdemir # Version: 1.0.1.21 # Date: 06/12/2021 # Vendor Homepage: https://ttyplus.com/multi-tabbed-putty/ # Tested on: Windows 10 Proof of Concept ================ Step 1: Open MTPutty and add a new SSH connection. Step 2: Click double times and connect to the server. Step 3: Run run “Get-WmiObject Win32_Process | select name, commandline | findstr putty.exe” on powershell. Step 4: You can see the hidden password on PowerShell terminal. Link to comment Share on other sites More sharing options...
Recommended Posts