Notepad
This module searched for stored data in Notepad and Notepad++ in the following locations:
Notepad++ backup files:
C:\Users\<UserProfile>\APPDATA\Roaming\NotePad++\backup\
Microsoft Notepad backup files (Windows 11 / Server 2025 only)
C:\Users\<UserProfile>\AppData\Local\Packages\Microsoft.WindowsNotepad_*\LocalState\TabState\
For each system output is stored in $pwd\PME\PME\Notepad\
Supported Methods
MSSQL
SMB
SessionHunter (WMI)
WMI
WinRM
Optional Parameters
Parameter
Value
Description
-ShowOutput
N/A
Displays each target output to the console
-SuccessOnly
N/A
Display only successful results
Usage
Last updated
Was this helpful?