
PasswordFilter
2 ways of Password Filter DLL to record the plaintext password
password-attackspenetration-testing

2 ways of Password Filter DLL to record the plaintext password

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

Captures Windows Hello PINs at entry by injecting a DLL into LogonUI.exe that sets a CPU hardware breakpoint on NgcSerializeConvenienceCredential,…