search

bitsadmin / fakelogonscreen

Fake Windows logon screen to steal passwords
BSD 3-Clause "New" or "Revised" License
1.29k stars 231 forks source link

Freezing after entering password (good or bad) #10

Open R4ms3s3 opened 2 years ago

R4ms3s3 commented 2 years ago

Right after entering a password, the app start freezing. If you click somewhere while this time with your mouse, the app become brighter and a popup come asking if you want to close or wait to program. If you choose to close, the program stop immediatly without create any file. If you choose to wait while you have entered the rigth password (not a blank one in my case), you will finally get your pass in the file. If you wait while you have entered the wrong pass, the app finaly close itself after a big wait and without creating any file. The freezing time is around ~25 seconds (with good password) on good config (ryzen7 4.2ghz, 32gb ddr4) and more than a minute with a wrong pass.

Setup of my test:

-Real computer on Windows 10 version 10.0.19044.1586 -Local admin account (without microsoft online account) -not blank password. -app executed without admin rights.

Any fix or miss something?

bitsadmin commented 2 years ago

Thanks R4ms3s3 for your extensive report.

There is not much code to validate the password, basically only the ValidateCredentials function call within the using PrincipalContext statement[1]. That is also the only location where I can imagine your machine is somehow hanging to validate the result.

That means I unfortunately don't have a straight-forward answer to your question why it freezes for so long...

Best, Arris

[1] https://github.com/bitsadmin/fakelogonscreen/blob/master/Source/LogonScreen.cs#L56