tokyoneon / CredPhish

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.
https://www.blackhillsinfosec.com/how-to-phish-for-user-passwords-with-powershell/
280 stars 45 forks source link

$validateCredentials = $true does not validate #2

Open IAMinZoho opened 1 year ago

IAMinZoho commented 1 year ago

Please help.

On that note, is it possible to have CredsLeaker 's way to check for correct passwords?

Thanks in advance!