search

bitsadmin / fakelogonscreen

Fake Windows logon screen to steal passwords
BSD 3-Clause "New" or "Revised" License
1.3k stars 233 forks source link

Add an option to specify the location of the save file and check already saved credentials #18

Open opteh opened 3 weeks ago

opteh commented 3 weeks ago

This is a very interesting utility. I would like to ask the developer to add an option to specify where to save the password file. We suggest adding fakelogonscreen to everyone's autostart.

Also the option to check already saved credentials would be very useful. And if the user credentials are already saved and they are correct, then fakelogonscreen does not display the fake logon window. Thanks!

bitsadmin commented 6 days ago

Hi @opteh, thanks for your suggestions for improvement!

For now you can update the path to where the credentials are stored in https://github.com/bitsadmin/fakelogonscreen/blob/master/Source/LogonScreen.cs#L77

Autostart for now could be done manually by for example adding an autorun entry to HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run or creating a Scheduled Tasks which launches upon user login.

The feature of not showing the screen if the credential is already present in the file would have to be developed. Feel free to add it and submit a pull request!