Awesome Open Source
Awesome Open Source

CredPhish is a PowerShell script designed to invoke credential prompts and exfiltrate passwords. It relies on CredentialPicker to collect user passwords, Resolve-DnsName for DNS exfiltration, and Windows Defender's ConfigSecurityPolicy.exe to perform arbitrary GET requests.

For a walkthrough, see the Black Hills Infosec publication.


Get A Weekly Email With Trending Projects For These Topics
No Spam. Unsubscribe easily at any time.
Shell (232,761
Dns (2,008
Penetration Testing (805
Kali Linux (501
Dns Server (329
Backdoor (307
Reverse Shell (264
Information Security (235
Kali (231
Offensive Security (171
Related Projects