mRemoteNG-decrypt
Decrypts mRemoteNG's confCons.xml passwords.
Decrypts the passwords mRemoteNG stores in confCons.xml (AES with a known default passphrase), a classic loot on admin jump boxes that manage many hosts.
Family Credential dumping & theft
Flags -f confCons.xml -s
Concepts Credential Hunting
Cheatsheet Credentials & run-as
Installation
git clone https://github.com/kmahyyg/mremoteng-decryptUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.