putty.known_hosts

$ target-query <path/to/target> -f putty.known_hosts

Details

Module	dissect.target.plugins.apps.ssh.putty.PuTTYPlugin
Output	records

Module documentation

Extract artifacts from the PuTTY client.

NOTE:

• Does not parse $HOME/.putty/randomseed (GNU/Linux) and HKCU\Software\SimonTatham\PuTTY\RandSeedFile (Windows)

References:

• http://www.chiark.greenend.org.uk/~sgtatham/putty/0.78/puttydoc.txt

• http://www.chiark.greenend.org.uk/~sgtatham/putty/faq.html#faq-settings

Function documentation

Parse PuTTY saved SshHostKeys.