Jump to content
Tuts 4 You

[Help]How to HOOK LogonUI.exe


Howsk

Recommended Posts

Hello everybody:

There is a question bothers me for a long time.

I want to get my computer's UserName、Domain、PassWord between LogonUI.exe and StartShell(Winlogon Notification Events),so i must HOOK it(LogonUI.exe),and i only want to HOOK it.I have referencesed some information,but failed.

So,everybody,How to HOOK LogonUI.exe can get UserName、Domain、PassWord?

Thanks.

Edited by Howsk
Change the Title
Link to comment

Why would you do this with hooking?

To get the user name and domain you don't need to do any special things, you can get them with just a WINAPI call.

Getting the passwords is a bit trickier, but you can dump and decrypt them from the lsass process. There is a open sourced project called mimikatz which does this, you can take a look at it:

https://github.com/gentilkiwi/mimikatz/wiki/module-~-sekurlsa

Edited by A200K
  • Like 1
Link to comment
  • 2 weeks later...
On 2016/8/10 at 2:34 PM, A200K said:

Why would you do this with hooking?

To get the user name and domain you don't need to do any special things, you can get them with just a WINAPI call.

Getting the passwords is a bit trickier, but you can dump and decrypt them from the lsass process. There is a open sourced project called mimikatz which does this, you can take a look at it:

https://github.com/gentilkiwi/mimikatz/wiki/module-~-sekurlsa

Yeahh!Thank u very much,i have read this article,and i solved my problem now.really thank u.:D

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...