ThievingFox
Post-exploitation tools to gather credentials from various password managers and Windows utilities.
ThievingFox is a collection of post-exploitation tools to gather credentials from various password managers and windows utilities. Each module leverages a specific method of injecting into the target process, and then hooks internals functions to gather crendentials.
Windows version:
- Windows Server 2022
- Windows Server 2019
- Windows Server 2016
- Windows Server 2012R2
- Windows 10
- Windows 11
Supported applications:
- KeePass.exe
- KeePassXC.exe
- LogonUI.exe
- consent.exe
- mstsc.exe
- RDCMan.exe
- MobaXTerm.exe