Share
## https://sploitus.com/exploit?id=PACKETSTORM:165206
# Exploit Title: MTPutty 1.0.1.21 - SSH Password Disclosure  
# Exploit Author: Sedat Ozdemir  
# Version: 1.0.1.21  
# Date: 06/12/2021  
# Vendor Homepage: https://ttyplus.com/multi-tabbed-putty/  
# Tested on: Windows 10  
  
Proof of Concept  
================  
  
Step 1: Open MTPutty and add a new SSH connection.  
Step 2: Click double times and connect to the server.  
Step 3: Run run “Get-WmiObject Win32_Process | select name, commandline |  
findstr putty.exe” on powershell.  
Step 4: You can see the hidden password on PowerShell terminal.