SolarPuttyCracker
Brute-forces the saved SolarPutty sessions (.dat).
Decrypts SolarPutty's saved sessions (.dat file). Those sessions hold cleartext SSH/RDP credentials protected only by a password that can be brute-forced.
Family Cracking & wordlists
Flags -w <rockyou.txt> <sessions.dat>
Concepts Credential reuse
Cheatsheet Hashes
Installation
# Decrypts SolarPutty's saved sessions. .NET binary that runs on your Windows
# (or the target's Windows): download the release .exe and point it at the
# sessions file (%APPDATA%\SolarWinds\FreeTools\Solar-PuTTY\data.dat):
SolarPuttyDecrypt.exe <data.dat>Useful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- InstantHackTheBox