Update README.md

This commit is contained in:
Kavitate 2022-12-24 07:57:37 -06:00 committed by GitHub
parent b6f1291d29
commit 28f78c612c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -15,14 +15,14 @@
# Credz-Plz
A script used to prompt the target to enter their creds to later be exfiltrated with dropbox.
A script used to prompt the target to enter their creds to later be exfiltrated with either Dropbox or a Discord webhook.
## Description
A pop up box will let the target know "Unusual sign-in. Please authenticate your Microsoft Account".
This will be followed by a fake authentication ui prompt.
If the target tried to "X" out, hit "CANCEL" or while the password box is empty hit "OK" the prompt will continuously re pop up.
Once the target enters their credentials their information will be uploaded to your dropbox for collection.
Once the target enters their credentials their information will be uploaded to your Dropbox or Discord webhook for collection.
![alt text](https://github.com/I-Am-Jakoby/hak5-submissions/blob/main/OMG/Payloads/OMG-Credz-Plz/unusual-sign-in.jpg)