login details - Githubissues

bitsadmin / fakelogonscreen

Fake Windows logon screen to steal passwords

BSD 3-Clause "New" or "Revised" License

1.3k stars 232 forks source link

Closed truesamurai closed 4 years ago

truesamurai commented 4 years ago

When I execute FakeLogonScreen.exe, where is the password saved?

bitsadmin commented 4 years ago

Check the README:

FakeLogonScreen.exe: Writes output to console which for example is compatible with Cobalt Strike
FakeLogonScreenToFile.exe: Writes output to console and %LOCALAPPDATA%\Microsoft\user.db