CredPhish

CredPhish è uno script PowerShell progettato per richiamare richieste di credenziali ed esfiltrare password. Si basa su CredentialPicker per raccogliere le password degli utenti, Resolve-DnsName per l'esfiltrazione DNS e ConfigSecurityPolicy.exe di Windows Defender per eseguire richieste GET...

CredPhish - A PowerShell Script Designed To Invoke Legitimate Credential Prompts And Exfiltrate Passwords Over DNS

CredPhish is a PowerShell script designed to invoke credential prompts and exfiltrate passwords. It relies on CredentialPicker to collect user passwords, Resolve-DnsName for DNS exfiltration, and Windows Defender's ConfigSecurityPolicy.exe to perform arbitrary GET requests. For a walkthrough, see...