Scanner 135 /etc/passwd 102 c:\windows\win.ini 82 c:\programdata\rhinosoft\serv-u\serv-u-startuplog.txt 41 c:\users\administrator\ntuser.dat 16 c:\shares\serv-u.fileshares 6 /etc/resolv.conf 4 c:\winnt\win.ini 4 c:\windows\system32\drivers\etc\hosts 4 c:\user.dat\ntuser.dat 4 c:\documents and settings\administrator\ntuser.dat 4 c:\boot.ini 3 /etc/group 3 c:\programdata\rhinosoft\serv-u\serv-u.archive 2 /etc/ssh/sshd_config 2 /etc/hosts 1 /var/log/auth.log 1 /etc/hostname 1 /etc/group/root 1 c:\programdata\rhinosoft\serv-u\shares\serv-u.fileshares 1 c:\ntuser.dat\ntuser.dat Windows cred files 34 c:\windows\panther\unattended.xml 32 c:\windows\sysprep\sysprep.xml 32 c:\windows\sysprep\sysprep.inf 31 c:\windows\sysprep.inf 31 c:\windows\panther\unattend\unattended.xml 27 c:\windows\system32\sysprep\unattend.xml 27 c:\windows\system32\sysprep\unattended.xml 27 c:\windows\panther\unattend.xml 27 c:\windows\panther\unattend\unattend.xml 13 c:\attend.xml\unattend.xml 11 c:\attended.xml\unattended.xml 10 c:\windows\system32\config\system.sav 10 c:\windows\system32\config\software.sav 10 c:\windows\system32\config\security.sav 10 c:\windows\system32\config\regback\system 10 c:\windows\system32\config\regback\sam 10 c:\windows\system32\config\default.sav 10 c:\windows\repair\system 10 c:\windows\repair\sam 8 c:\sprep.xml\sysprep.xml 8 c:\sprep.inf\sysprep.inf 6 c:\windows\system32\sysprep.xml 6 c:\windows\system32\sysprep\sysprep.xml 6 c:\windows\system32\config\system 6 c:\windows\system32\config\sam 6 c:\unattend.xml 6 c:\unattend.txt 6 c:\unattend.inf 4 c:\windows\system32\inetsrv\config\applicationhost.config 4 c:\windows\system32\config\secevent.evt 4 c:\windows\system32\config\regback\software 4 c:\windows\system32\config\regback\security 4 c:\windows\system32\config\regback\default 4 c:\windows\system32\config\appevent.evt 4 c:\windows\repair\software 4 c:\windows\repair\security 3 c:\windows\debug\netsetup.log 1 c:\unattended.xml\unattended.xml 1 c:\sysprep.xml\sysprep.xml Web files 12 c:\php\php.ini 8 c:\xampp\apache\bin\php.ini 8 c:\winnt\php.ini 8 c:\apache\php\php.ini 7 c:\windows\php.ini 6 c:\windows\inetpub\wwwroot\web.config 6 c:\php4\php.ini 5 c:\php5\php.ini 4 c:\xampp\apache\logs\access.log 4 c:\program files (x86)\apache group\apache\conf\httpd.conf 4 c:\program files (x86)\apache group\apache\conf\error.log 4 c:\program files (x86)\apache group\apache\conf\access.log 4 c:\program files (x86)\apache group\apache2\conf\httpd.conf 4 c:\program files\apache group\apache\logs\error.log 4 c:\program files\apache group\apache\logs\access.log 4 c:\program files\apache group\apache\conf\httpd.conf 4 c:\program files\apache group\apache2\conf\httpd.conf 4 c:\netserver\bin\stable\apache\php.ini 4 c:\inetpub\wwwroot\global.asa 4 c:\inetpub\logs\logfiles\w3svc1\u_ex[yymmdd].log 4 c:\apache\logs\error.log 4 c:\apache\logs\access.log 3 c:\xampp\apache\logs\error.log 3 c:\windows\system32\inetsrv\config\schema\aspnet_schema.xml 3 c:\program files (x86)\xampp\apache\conf\httpd.conf Databases 8 c:\program files\mysql\mysql server 5.0\my.ini 8 c:\program files\mysql\mysql server 5.0\data\mysql.err 8 c:\program files\mysql\mysql server 5.0\data\mysql-bin.log 8 c:\program files\mysql\my.ini 8 c:\program files\mysql\my.cnf 8 c:\program files\mysql\data\mysql.err 8 c:\program files\mysql\data\mysql-bin.log 8 c:\mysql\my.ini 8 c:\mysql\my.cnf 8 c:\mysql\data\mysql.log 8 c:\mysql\data\mysql.err 7 c:\program files\mysql\mysql server 5.0\my.cnf 7 c:\program files\mysql\mysql server 5.0\data\mysql.log 6 c:\program files\mysql\data\mysql.log 4 c:\var\postgresql\db\postgresql.conf 4 c:\var\lib\pgsql\data\postgresql.conf 4 c:\usr\local\pgsql\data\postgresql.conf 4 c:\usr\local\pgsql\data\pg_hba.conf 4 c:\usr\local\pgsql\data\passwd 4 c:\usr\internet\pgsql\data\pg_hba.conf 4 c:\program files\mysql\mysql server 5.1\my.ini 4 c:\program files\mysql\mysql server 5.0\data\mysql-bin.index 4 c:\program files\mysql\mysql server 5.0\data\{ipdelhost}.err 4 c:\program files\mysql\data\mysql-bin.index 4 c:\program files\mysql\data\{ipdelhost}.err 4 c:\program files\microsoft sql server\mssql.1\template data\master.mdf 4 c:\program files\microsoft sql server\mssql14.sqlexpress\template data\master.mdf 4 c:\program files\microsoft sql server\mssql13.sqlexpress\template data\master.mdf 4 c:\program files\microsoft sql server\mssql12.sqlexpress\template data\master.mdf 4 c:\program files\microsoft sql server\mssql11.sqlexpress\template data\master.mdf 4 c:\program files\microsoft sql server\mssql10.sqlexpress\template data\master.mdf 4 c:\postgresql\log\pgadmin.log 4 c:\mysql\data\mysql-bin.log 4 c:\mysql\data\mysql-bin.index 4 c:\mysql\data\{ipdelhost}.err 4 c:\mysql\data\hostname.err 4 c:\mysql\bin\my.ini 3 c:\var\nm2\postgresql.conf 3 c:\program files\mysql\mysql server 5.0\data\hostname.err 2 c:\program files\mysql\data\hostname.err Broken 6 c:\windows\inetpub\wwwroot\conntectionstrings.config 6 c:\stem\system 6 c:\m\sam 2 c:\ureprofile.json\azureprofile.json 2 c:\unattend.xml\unattend.xml 2 c:\sysprep.inf\sysprep.inf 2 c:\stem.sav\system.sav 2 c:\nsolehost_history\consolehost_history 2 c:\nntectionstrings.config\conntectionstrings.config 2 c:\gacy_credentials\legacy_credentials 2 c:\ftware.sav\software.sav 2 c:\fault.sav\default.sav 2 c:\edentials.db\credentials.db 2 c:\edentials\credentials 2 c:\curity.sav\security.sav 2 c:\cesstokens.json\accesstokens.json 2 c:\cess_tokens.db\access_tokens.db 2 c:\b.config\web.config 2 c:\attend.txt\unattend.txt 2 c:\attend.inf\unattend.inf 1 /var/backups 1 /var 1 /etc/shh/sshd_config 1 /etc/netplan/ 1 /etc/id.so.preload Interesting config files 6 c:\users\administrator\.azure\azureprofile.json 6 c:\users\administrator\.azure\accesstokens.json 6 c:\users\administrator\.aws\credentials 6 c:\users\administrator\appdata\roaming\gcloud\legacy_credentials 6 c:\users\administrator\appdata\roaming\gcloud\credentials.db 6 c:\users\administrator\appdata\roaming\gcloud\access_tokens.db 6 c:\users\administrator\appdata\microsoft\windows\powershell\psreadline\consolehost_history 4 c:\program files\filezilla server\filezilla server.xml 3 c:\program files (x86)\filezilla server\filezilla server.xml Fun guesses 8 c:\users\administrator\desktop\password.txt 8 c:\users\administrator\desktop\password.csv 8 c:\users\administrator\desktop\logins.txt 8 c:\users\administrator\desktop\logins.csv 8 c:\users\administrator\desktop\1.txt 8 c:\users\administrator\desktop\1.csv Linux cred files 13 /etc/shadow 2 /root/.bash_history