CredsLeaker – Tool to Display A Powershell Credentials Box

CredsLeaker – Tool to Display A Powershell Credentials Box

This script will display a powershell credentials box that will ask the user for his credentials.

The box cannot be closed (only by killing the process) will keeps checking the credentials against the DC. When validated, it will close and leak it to a web server outside.

How To:

  1. Start a web server.
  2. Type your server IP and port in the ps1 script.
  3. Execute the batch file.


TODO:

  • Box title should be changed.
  • Different windows versions has different credential boxes. Needs to be pulled from WINAPI.

http://feeds.feedburner.com/PentestTools