CredsStealer

CredsStealer allows an attacker to craft a highly convincing credentials prompt using Windows PromptForCredential, validate it against the DC or localmachine and in turn leak it via an HTTP request.

DISCLAIMER

TO BE USED FOR EDUCATIONAL PURPOSES ONLY

The use of the CredsStealer & its resources is COMPLETE RESPONSIBILITY of the END-USER. Developers assume NO liability and are NOT responsible for any misuse or damage caused by this program. Also we inform you that some of your your actions may be ILLEGAL and you CAN NOT use this software to test person or company without WRITTEN PERMISSION from them.

How to run

python3 run.py

Things you need

Kali linux

How to install

pip3 install -r requirements.txt