> For the complete documentation index, see [llms.txt](https://ppn.snovvcra.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ppn.snovvcra.sh/pentest/infrastructure/ad/credential-harvesting/nplogonnotify.md).

# NPLogonNotify

* <https://github.com/gtworek/PSBits/tree/master/PasswordStealing/NPPSpy>
* <https://www.scip.ch/en/?labs.20220217>
* <https://www.huntress.com/blog/cleartext-shenanigans-gifting-user-passwords-to-adversaries-with-nppspy>