That's cheeky! I built a C# tool that popped up a custom password prompt saying that you've been disconnected from outlook, but this is better! 
#FakeLogonScreen is a C# utility to steal a user's password using a fake Windows logon screen. This password will then be validated and saved to disk. Useful in combination with #CobaltStrike's execute-assembly command.
https://github.com/bitsadmin/fakelogonscreen …pic.twitter.com/2pAOk9InLM
-
-
-
That's also a nice one!
Always fun to find a way to fool/force a user into typing his/her password
Kraj razgovora
Novi razgovor -
-
-
Thanks for sharing. I was wondering why you didn't add the code for fake "Reset password" and "Sign-in options"?
-
Most people will simply type their password to continue doing what they were doing, while the few more tech-savvy users will immediately notice the screen is fake. This tool is aimed at the first group so no need to build all screens
- Još 1 odgovor
Novi razgovor -
-
-
- Još 1 odgovor
Novi razgovor -
-
Thank you for making it available. It's cool that it validates the password! I'm also curious, how did you change the cobalt interactive console prompt from "beacon>" to this "Arris[DESKTOP-FK33.....]" ? I couldn't find an API for that
-
I just added some of the
#CobaltStrike scripts I use to a new repository. The script you need is the logging.cna script created by@r3dQu1nn.https://github.com/bitsadmin/cobaltstrike … - Još 2 druga odgovora
Novi razgovor -
-
-
Does it work if you press Ctrl-Alt-Del first?
-
Should not, I'd say
- Još 2 druga odgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.