Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Password comparison error #7

Open
dh3b opened this issue Dec 21, 2021 · 1 comment
Open

Password comparison error #7

dh3b opened this issue Dec 21, 2021 · 1 comment

Comments

@dh3b
Copy link

dh3b commented Dec 21, 2021

After running an exe the script compares the password wrongly.

I've tried writing my outlook password and PC numerical pin not non of these worked. Right after looking into %LOCALAPPDATA%\Microsoft\ there was no file like user.db. Is it a script bug or system stores the password not correctly?

@bitsadmin
Copy link
Owner

Hi dheb,

In case a PIN is configured you should have a password configured first. That is the password that is being requested at the fake logonscreen. Depending on whether the FakeLogonScreen.exe or FakeLogonScreenToFile.exe binary is used, the password is respectively printed to the console or written to a file. I haven't checked the source, but wrong attempts might also be written to that file.

I haven't tested what happens if a Microsoft account is used as opposed to a local or domain user account. I can imagine a Microsoft account underlying works with AzureAD and should then use the same Windows APIs to validate the password, but I haven't looked at that yet.

Hope this gives you some pointers to debug this!

Best,
Arris

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants