关于 [2018-3-15-渗透技巧——获得Windows系统的远程桌面连接历史记录] 的一点细节问题

[w-devin]

在代码样例：

$RegPath = "Registry::HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Servers\"
$QueryPath = dir $RegPath -Name
foreach($Name in $QueryPath)
{   
    Try  
    {  
        $User = (Get-ItemProperty -Path $RegPath$Name -ErrorAction Stop | Out-Null).UsernameHint
            Write-Host "Server:"$Name
            Write-Host "User:"$User"`n"
        }
        Catch  
        {
        Write-Host "No RDP Connections History"
        }
}

| Out-Null 应该会导致$User 为空

[3gstudent]

感谢，已更正