What is CSRF Attack ?
https://medium.com/@teambbh.offical/what-is-csrf-attack-16aa4f49848a?source=rss------bug_bounty-5
Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they…Continue reading on Medium » (https://medium.com/@teambbh.offical/what-is-csrf-attack-16aa4f49848a?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@teambbh.offical/what-is-csrf-attack-16aa4f49848a?source=rss------bug_bounty-5
Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they…Continue reading on Medium » (https://medium.com/@teambbh.offical/what-is-csrf-attack-16aa4f49848a?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
What is CSRF Attack ?
Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
New tool can uncover redacted, pixelated text to reveal sensitive data
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New tool can uncover redacted, pixelated text to reveal sensitive dataPost Views: 196 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes
Researchers have demonstrated how a new tool can uncover redacted text from documents, potentially exposing sensitive information to nefarious actors.
The tool, called Unredacter, was released by Bishop Fox on February 15.
To demonstrate that pixilation is “a no-good, bad, insecure, surefire way to get your sensitive data leaked”, it was designed to take redacted pixelized text and reverse it back into its reveal the supposedly hidden “clear text”.
In a blog post, lead researcher Dan Petro, who wrote the tool, explained that it was created in order to complete a challenge set by Jumspec, and also due to the use of pixilation being a “pet peeve” of his.
See Also: Complete Offensive Security and Ethical Hacking Course InsecureBishop Fox has a “long-standing policy” to only redact information using black bars, which the company says is the only secure way technique.
“Sometimes, people like to be clever and try some other redaction techniques like blurring, swirling, or pixilation,” lead researcher Dan Petro wrote. “But this is a mistake.”
He told The Daily Swig: “It’s just not a secure way to redact information,” he explained. “But you see it all the time out there on the internet, often by journalists.
“Clearly the community needed to be convinced that pixilation is bad, and a tool to un-redact is the best way to do it.” The toolPetro explained that assuming one already knows the font type for the original information and of the redacted text, “since the attacker in a realistic scenario would likely have received a full report”, his tool can be used to circumvent common issues when it comes to revealing redacted information.
These issues include character bleed over, when a letter shares more than one pixilation column, variable widths between letters, and font inconsistency, which can all make using an algorithm difficult.
Petro wrote: “…there’s an existing tool called Depix that tries to do exactly this through a really clever process of looking up what permutations of pixels could have resulted in certain pixelated blocks, given a De Bruijn sequence of the correct font.”
“I like the theory of this tool a lot,” he said, but added that it “doesn’t work as well in practice as you’d like”.
The blog post contains more technical detail on how the Unredacter tool was built, as well as a proof of concept.
See Also: Windows vulnerability with new public exploits lets you become admin WarningPetro said that the tool is aimed at being used by “possibly Red Teams”, but added that it “is mostly a proof-of-concept to drive home a point – never redact text with anything other than black bars fully covering the text”.
The researcher added: “Redacted data can be almost anything from passwords in a pen test report to victim names in a criminal report.
“The consequences to insecurely redacting information is highly context-dependent, but generally, someone redacts information because they don’t want it to be read.” See Also: Offensive Security Tool: Stratus Red Team
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to e[...]
___________________________
@hacking_Attack
@Hacking_Video
New tool can uncover redacted, pixelated text to reveal sensitive data
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New tool can uncover redacted, pixelated text to reveal sensitive dataPost Views: 196 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes
Researchers have demonstrated how a new tool can uncover redacted text from documents, potentially exposing sensitive information to nefarious actors.
The tool, called Unredacter, was released by Bishop Fox on February 15.
To demonstrate that pixilation is “a no-good, bad, insecure, surefire way to get your sensitive data leaked”, it was designed to take redacted pixelized text and reverse it back into its reveal the supposedly hidden “clear text”.
In a blog post, lead researcher Dan Petro, who wrote the tool, explained that it was created in order to complete a challenge set by Jumspec, and also due to the use of pixilation being a “pet peeve” of his.
See Also: Complete Offensive Security and Ethical Hacking Course InsecureBishop Fox has a “long-standing policy” to only redact information using black bars, which the company says is the only secure way technique.
“Sometimes, people like to be clever and try some other redaction techniques like blurring, swirling, or pixilation,” lead researcher Dan Petro wrote. “But this is a mistake.”
He told The Daily Swig: “It’s just not a secure way to redact information,” he explained. “But you see it all the time out there on the internet, often by journalists.
“Clearly the community needed to be convinced that pixilation is bad, and a tool to un-redact is the best way to do it.” The toolPetro explained that assuming one already knows the font type for the original information and of the redacted text, “since the attacker in a realistic scenario would likely have received a full report”, his tool can be used to circumvent common issues when it comes to revealing redacted information.
These issues include character bleed over, when a letter shares more than one pixilation column, variable widths between letters, and font inconsistency, which can all make using an algorithm difficult.
Petro wrote: “…there’s an existing tool called Depix that tries to do exactly this through a really clever process of looking up what permutations of pixels could have resulted in certain pixelated blocks, given a De Bruijn sequence of the correct font.”
“I like the theory of this tool a lot,” he said, but added that it “doesn’t work as well in practice as you’d like”.
The blog post contains more technical detail on how the Unredacter tool was built, as well as a proof of concept.
See Also: Windows vulnerability with new public exploits lets you become admin WarningPetro said that the tool is aimed at being used by “possibly Red Teams”, but added that it “is mostly a proof-of-concept to drive home a point – never redact text with anything other than black bars fully covering the text”.
The researcher added: “Redacted data can be almost anything from passwords in a pen test report to victim names in a criminal report.
“The consequences to insecurely redacting information is highly context-dependent, but generally, someone redacts information because they don’t want it to be read.” See Also: Offensive Security Tool: Stratus Red Team
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to e[...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
New tool can uncover redacted, pixelated text to reveal sensitive data | Black Hat Ethical Hacking
Researchers have demonstrated how a new tool can uncover redacted text from documents, potentially exposing sensitive information to nefarious actors. The tool, called Unredacter, was released by Bishop Fox on February 15.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking New tool can uncover redacted, pixelated text to reveal sensitive data https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New tool can uncover redacted, pixelated text to reveal sensitive dataPost…
xpress your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: How ILOVEYOU worm became the first global computer virus pandemic Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-3-1-90x90.jpg Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/banner-2022.1-release-90x90.jpg Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/acastro_210104_1777_google_0001-90x90.jpg Google Project Zero: Vendors are now quicker at fixing zero-days2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Apple-Warning-90x90.jpg Apple patches new zero-day exploited to hack iPhones, iPads, Macs5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/f4bc-article-200611-wordpress-body-text-90x90.jpg PHP Everywhere RCE flaws threaten thousands of WordPress sites6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/178-706-450-android-patch-770x439_c-90x90.jpg Google fixes remote escalation of privileges bug on Android1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-4-90x90.jpg Qbot needs only 30 minutes to steal your credentials, emails1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/364-3648628_google-drive-90x90.jpg Google Drive integration errors created SSRF flaws in multiple applications1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-3-90x90.jpg Cisco patches critical vulnerabilities in SMB routers, exploitation available2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/b2b-90x90.jpg ESET antivirus bug let attackers gain Windows SYSTEM privileges2 weeks ago
The post New tool can uncover redacted, pixelated text to reveal sensitive data first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
See Also: How ILOVEYOU worm became the first global computer virus pandemic Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-3-1-90x90.jpg Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/banner-2022.1-release-90x90.jpg Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/acastro_210104_1777_google_0001-90x90.jpg Google Project Zero: Vendors are now quicker at fixing zero-days2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Apple-Warning-90x90.jpg Apple patches new zero-day exploited to hack iPhones, iPads, Macs5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/f4bc-article-200611-wordpress-body-text-90x90.jpg PHP Everywhere RCE flaws threaten thousands of WordPress sites6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/178-706-450-android-patch-770x439_c-90x90.jpg Google fixes remote escalation of privileges bug on Android1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-4-90x90.jpg Qbot needs only 30 minutes to steal your credentials, emails1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/364-3648628_google-drive-90x90.jpg Google Drive integration errors created SSRF flaws in multiple applications1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-3-90x90.jpg Cisco patches critical vulnerabilities in SMB routers, exploitation available2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/b2b-90x90.jpg ESET antivirus bug let attackers gain Windows SYSTEM privileges2 weeks ago
The post New tool can uncover redacted, pixelated text to reveal sensitive data first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
CompTIA (Security+, Linux+, Network+) PBQs - Labs and more | Happy learning
Hola community,
Extra PBQs to support your studies.
Free CompTIA A+ Core 2 PBQs: https://dojolab.org/labs/comptia-a-220-1002-dojo-lab/
Free CompTIA Network+ PBQs: https://dojolab.org/labs/comptia-network-n10-007-n10-008-dojo-lab/
Free CompTIA Security+ PBQs: https://dojolab.org/labs/comptia-security-sy0-601-dojo-lab/
Free CompTIA Linux+ PBQs: https://dojolab.org/labs/comptia-linux-xk0-004-dojo-lab/
Happy learning
submitted by /u/Complex_Temperature5
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
CompTIA (Security+, Linux+, Network+) PBQs - Labs and more | Happy learning
Hola community,
Extra PBQs to support your studies.
Free CompTIA A+ Core 2 PBQs: https://dojolab.org/labs/comptia-a-220-1002-dojo-lab/
Free CompTIA Network+ PBQs: https://dojolab.org/labs/comptia-network-n10-007-n10-008-dojo-lab/
Free CompTIA Security+ PBQs: https://dojolab.org/labs/comptia-security-sy0-601-dojo-lab/
Free CompTIA Linux+ PBQs: https://dojolab.org/labs/comptia-linux-xk0-004-dojo-lab/
Happy learning
submitted by /u/Complex_Temperature5
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
CompTIA (Security+, Linux+, Network+) PBQs - Labs and more | Happy...
Hola community, **Extra PBQs to support your studies.** Free CompTIA A+ Core 2 PBQs:...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
How do I get Ciphey to use more cores for decryption?
im trying to crack a hash with ciphey but its taking forever and the process is only using one core.
repo: https://github.com/Ciphey/Ciphey
submitted by /u/dominic_l
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
How do I get Ciphey to use more cores for decryption?
im trying to crack a hash with ciphey but its taking forever and the process is only using one core.
repo: https://github.com/Ciphey/Ciphey
OS: Arch Linux x86_64 Kernel: 5.16.9-zen1-1-zen CPU: Intel i5-3570K (4) @ 4.500GHz GPU: NVIDIA GeForce GTX 770 Memory: 2310MiB / 15960MiB submitted by /u/dominic_l
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
How do I get Ciphey to use more cores for decryption?
im trying to crack a hash with ciphey but its taking forever and the process is only using one core. repo:...
My First Reflected XSS Bug Bounty — Google Dork — $xxx
Today I will share a Reflected XSS vulnerability that was reported by me and i found this with google dorks…Continue reading on InfoSec Write-ups »
Read more...
Today I will share a Reflected XSS vulnerability that was reported by me and i found this with google dorks…Continue reading on InfoSec Write-ups »
Read more...
What is CSRF Attack ?
Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they…Continue reading on Medium »
Read more...
Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they…Continue reading on Medium »
Read more...
Hacked Dutch Government Website. All I got was this l̶o̶u̶s̶y̶ cool T-Shirt.
They are right. Persistence is the key !Continue reading on Medium »
Read more...
They are right. Persistence is the key !Continue reading on Medium »
Read more...
Hacking on Medium
This iOS Security Flaw Needs To Be Addressed In Every App
https://cdn-images-1.medium.com/max/1170/1*VC_Sn04kQCmjR6t3gKfP9g.png
A flaw in the way iOS handles app uninstalls means that sensitive Keychain data isn’t deleted when the rest of the app’s user content is…
Continue reading on Medium »
This iOS Security Flaw Needs To Be Addressed In Every App
https://cdn-images-1.medium.com/max/1170/1*VC_Sn04kQCmjR6t3gKfP9g.png
A flaw in the way iOS handles app uninstalls means that sensitive Keychain data isn’t deleted when the rest of the app’s user content is…
Continue reading on Medium »
Medium
This iOS Security Flaw Needs To Be Addressed In Every App
A flaw in the way iOS handles app uninstalls means that sensitive Keychain data isn’t deleted when the rest of the app’s user content is…
Hacking on Medium
Hacked Dutch Government Website. All I got was this l̶o̶u̶s̶y̶ cool T-Shirt.
https://cdn-images-1.medium.com/max/600/1*qm0P1x8h6XYjwEw637zRaQ.png
They are right. Persistence is the key !
Continue reading on Medium »
Hacked Dutch Government Website. All I got was this l̶o̶u̶s̶y̶ cool T-Shirt.
https://cdn-images-1.medium.com/max/600/1*qm0P1x8h6XYjwEw637zRaQ.png
They are right. Persistence is the key !
Continue reading on Medium »
Medium
Hacked Dutch Government Website. All I got was this l̶o̶u̶s̶y̶ cool T-Shirt.
They are right. Persistence is the key !
Hacking on Medium
Free OWASP TOP 10 Playground on herokuapp
https://cdn-images-1.medium.com/max/2401/1*DazaNUTki-qxygr2nQZngQ.png
Juice Shop is a vulnerable webapp written in Node.js, Express and Angular. It was the first application written entirely in JavaScript…
Continue reading on Medium »
Free OWASP TOP 10 Playground on herokuapp
https://cdn-images-1.medium.com/max/2401/1*DazaNUTki-qxygr2nQZngQ.png
Juice Shop is a vulnerable webapp written in Node.js, Express and Angular. It was the first application written entirely in JavaScript…
Continue reading on Medium »
Medium
Free OWASP TOP 10 Playground on herokuapp
Juice Shop is a vulnerable webapp written in Node.js, Express and Angular. It was the first application written entirely in JavaScript…
Hacking on Medium
Cybersecurity Breaches & Solutions | Feb 16th, 2022
https://cdn-images-1.medium.com/max/1920/1*7Im7z7Fm9F_cy2gPk1iloA.png
Severe Vulnerabilities on Apple & Moxa, and an Ominous Rise in DDoS Attacks
Continue reading on HUB Security »
Cybersecurity Breaches & Solutions | Feb 16th, 2022
https://cdn-images-1.medium.com/max/1920/1*7Im7z7Fm9F_cy2gPk1iloA.png
Severe Vulnerabilities on Apple & Moxa, and an Ominous Rise in DDoS Attacks
Continue reading on HUB Security »
Medium
Cybersecurity Breaches & Solutions | Feb 16th, 2022
Severe Vulnerabilities on Apple & Moxa, and an Ominous Rise in DDoS Attacks
Hacking on Medium
Hacking? Hacker? What?
https://cdn-images-1.medium.com/max/600/0*aRNF-FSZvouTv2Pe
When someone mentions the term “Hacker” why does the mind directly picture a hooded figure in front of a laptop with a black screen…
Continue reading on Medium »
Hacking? Hacker? What?
https://cdn-images-1.medium.com/max/600/0*aRNF-FSZvouTv2Pe
When someone mentions the term “Hacker” why does the mind directly picture a hooded figure in front of a laptop with a black screen…
Continue reading on Medium »
Medium
Hacking? Hacker? What?
When someone mentions the term “Hacker” why does the mind directly picture a hooded figure in front of a laptop with a black screen…
Hacking Articles Tips Tricks Videos Tutorials
GIF
KitPloit - PenTest Tools!
FakeLogonScreen - Fake Windows Logon Screen To Steal Passwords
http://4.bp.blogspot.com/-20diIlff9Es/Yd0ernCa4RI/AAAAAAAA8j0/mhGTik-X11w_7sfEWP1_uIorfkCZSpDEwCK4BGAYYCw/w640-h400/fakelogonscreen_1_demo-761682.gif
FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk.
It can either be executed by simply running the .exe file, or using for example Cobalt Strike's
Binaries available from the Releases page.
* FakeLogonScreen.exe: Writes output to console which for example is compatible with Cobalt Strike
* FakeLogonScreenToFile.exe: Writes output to console and
Folders:
* / (root): Built against .NET Framework 4.5 which is installed by default in Windows 8, 8.1 and 10
* DOTNET35: Built against .NET Framework 3.5 which is installed by default in Windows 7
Features
* Primary display shows a Windows 10 login screen while additional screens turn black
* If custom background is configured by the user, shows that background instead of the default one
* Validates entered password before closing the screen
* Username and passwords entered are outputted to console or stored in a file
* Blocks many shortkeys to prevent circumventing the screen
* Minimizes all existing windows to avoid other windows staying on top
Authored by Arris Huijgen (@bitsadmin - https://github.com/bitsadmin/)
Download Fakelogonscreen
FakeLogonScreen - Fake Windows Logon Screen To Steal Passwords
http://4.bp.blogspot.com/-20diIlff9Es/Yd0ernCa4RI/AAAAAAAA8j0/mhGTik-X11w_7sfEWP1_uIorfkCZSpDEwCK4BGAYYCw/w640-h400/fakelogonscreen_1_demo-761682.gif
FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk.
It can either be executed by simply running the .exe file, or using for example Cobalt Strike's
execute-assemblycommand.Binaries available from the Releases page.
* FakeLogonScreen.exe: Writes output to console which for example is compatible with Cobalt Strike
* FakeLogonScreenToFile.exe: Writes output to console and
%LOCALAPPDATA%\Microsoft\user.dbFolders:
* / (root): Built against .NET Framework 4.5 which is installed by default in Windows 8, 8.1 and 10
* DOTNET35: Built against .NET Framework 3.5 which is installed by default in Windows 7
Features
* Primary display shows a Windows 10 login screen while additional screens turn black
* If custom background is configured by the user, shows that background instead of the default one
* Validates entered password before closing the screen
* Username and passwords entered are outputted to console or stored in a file
* Blocks many shortkeys to prevent circumventing the screen
* Minimizes all existing windows to avoid other windows staying on top
Authored by Arris Huijgen (@bitsadmin - https://github.com/bitsadmin/)
Download Fakelogonscreen
FakeLogonScreen - Fake Windows Logon Screen To Steal Passwords
http://www.kitploit.com/2022/02/fakelogonscreen-fake-windows-logon.html
http://www.kitploit.com/2022/02/fakelogonscreen-fake-windows-logon.html
FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory (https://www.kitploit.com/search/label/Active%20Directory) or local machine to make sure it is correct and is then displayed to the console (https://www.kitploit.com/search/label/Console) or saved to disk. It can either be executed by simply running the .exe file, or using for example Cobalt Strike's execute-assembly command.
Binaries available from the Releases (https://github.com/bitsadmin/fakelogonscreen/releases) page. FakeLogonScreen.exe: Writes output to console which for example is compatible with Cobalt Strike FakeLogonScreenToFile.exe: Writes output to console and %LOCALAPPDATA%\Microsoft\user.db Folders: / (root): Built against .NET Framework 4.5 which is installed by default in Windows 8, 8.1 and 10 DOTNET35: Built against .NET Framework 3.5 which is installed by default in Windows 7 Features Primary display shows a Windows 10 (https://www.kitploit.com/search/label/Windows%2010) login screen while additional screens turn black If custom background is configured by the user, shows that background instead of the default one Validates entered password before closing the screen Username and passwords (https://www.kitploit.com/search/label/Passwords) entered are outputted to console or stored in a file Blocks many shortkeys to prevent circumventing the screen Minimizes all existing windows to avoid other windows staying on top
Authored by Arris Huijgen (@bitsadmin (https://twitter.com/bitsadmin/) - https://github.com/bitsadmin/)
Download Fakelogonscreen (https://github.com/bitsadmin/fakelogonscreen)
Binaries available from the Releases (https://github.com/bitsadmin/fakelogonscreen/releases) page. FakeLogonScreen.exe: Writes output to console which for example is compatible with Cobalt Strike FakeLogonScreenToFile.exe: Writes output to console and %LOCALAPPDATA%\Microsoft\user.db Folders: / (root): Built against .NET Framework 4.5 which is installed by default in Windows 8, 8.1 and 10 DOTNET35: Built against .NET Framework 3.5 which is installed by default in Windows 7 Features Primary display shows a Windows 10 (https://www.kitploit.com/search/label/Windows%2010) login screen while additional screens turn black If custom background is configured by the user, shows that background instead of the default one Validates entered password before closing the screen Username and passwords (https://www.kitploit.com/search/label/Passwords) entered are outputted to console or stored in a file Blocks many shortkeys to prevent circumventing the screen Minimizes all existing windows to avoid other windows staying on top
Authored by Arris Huijgen (@bitsadmin (https://twitter.com/bitsadmin/) - https://github.com/bitsadmin/)
Download Fakelogonscreen (https://github.com/bitsadmin/fakelogonscreen)