CredPhish

CredPhish es un script de PowerShell diseñado para invocar solicitudes de credenciales y exfiltrar contraseñas. Se basa en CredentialPicker para recopilar contraseñas de usuarios, Resolve-DnsName para la exfiltración por DNS, y el ConfigSecurityPolicy.exe de Windows Defender para realizar...

CredPhish - A PowerShell Script Designed To Invoke Legitimate Credential Prompts And Exfiltrate Passwords Over DNS

CredPhish is a PowerShell script designed to invoke credential prompts and exfiltrate passwords. It relies on CredentialPicker to collect user passwords, Resolve-DnsName for DNS exfiltration, and Windows Defender's ConfigSecurityPolicy.exe to perform arbitrary GET requests. For a walkthrough, see...