> For the complete documentation index, see [llms.txt](https://ppn.snovvcra.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/credential-phishing.md).

# Credential Phishing

* <https://embracethered.com/blog/posts/2021/spoofing-credential-dialogs/>

## CredentialPhisher

* <https://blog.fox-it.com/2018/08/14/phishing-ask-and-ye-shall-receive/>
* <https://github.com/fox-it/Invoke-CredentialPhisher>

## creds\_hunt

* <https://github.com/0xsp-SRD/0xsp.com/tree/main/creds_hunt>

## Fake Logon Screen

* <https://github.com/bitsadmin/fakelogonscreen>
* <https://github.com/BlacksunLabs/LockScream>
* <https://github.com/marduc812/Win10CredsThief>