Files
Viper/docs/en/module/CredentialAccess_CredentialDumping_WindowsWDigestEnable.md
2025-04-24 22:30:10 +08:00

13 lines
515 B
Markdown

# Windows WDigest Switch
This is used to turn on the WDigest credential storage switch. The WDigest switch is turned off by default in Windows 8/2012 and above versions.
The switch can be turned on by modifying the `UseLogonCredential` value in the registry.
After the user logs off and logs back in, mimikatz can be used to capture passwords. .
## Operation Method
![](img\CredentialAccess_CredentialDumping_WindowsWDigestEnable\1.webp)
![](img\CredentialAccess_CredentialDumping_WindowsWDigestEnable\2.webp)