LogonStealer
Abuses the Credential Provider interface to steal plaintext passwords from logonui.exe via CredProvDataModel.dll hooks
Get picks like this daily. The day's top launches, AI/tech news, and a weekly opportunity spotlight — straight to your inbox.
This is 1 of 230 launches in vulnerability research and exploit tools — see how it stacks up on momentum and crowding →
488 other launches read as similar to this one →
Details
- External ID
- 1415335254
- Source
- GITHUB
- Company
- —
- Product
- LogonStealer
- Website domain
- github.com
- Launched
- Oct. 12, 2026
- Cohort
- —
- Upvotes
- 61
- Upvotes percentile
- 0.76
- Tags
- —
Enrichment
- Niche
- vulnerability research and exploit tools
- Vertical
- Security
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- credential provider hook tool for dumping windows logon passwords
- Manually corrected
- False
Could you build this?
No Developing malware/red-team tooling that hooks internal undocumented Windows components like CredProvDataModel.dll inside logonui.exe requires specialized offensive security, reverse engineering, and Windows internals expertise.
What it would actually take: Requires low-level C/C++ development using MinHook/Detours or manual assembly patching to inject DLLs into session 0/logonui.exe, bypassing Protected Process Light (PPL) or exploiting elevation mechanisms to intercept undocumented COM interfaces and memory buffers holding credential strings. It requires reverse-engineering Windows undocumented DLL exports and debugging winlogon/logonui using WinDbg.
Competitors
Other products that read as similar to this one — 488 launches clear the similarity bar, closest 8 shown.
Attention rank: #104 of 489 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 332 days after the earliest competitor.
- password-security-lab · github · 2026-10-01 · 9 upvotes · similarity 0.60
- cve-2026-41940-PoC · github · 2026-09-16 · 528 upvotes · similarity 0.60
- Selvum · hn · 2026-08-17 · 7 upvotes · similarity 0.58
- Brute · github · 2026-09-18 · 8 upvotes · similarity 0.57
- ResetSpy · github · 2026-09-15 · 40 upvotes · similarity 0.56
- CredentialExplorer · github · 2026-10-01 · 9 upvotes · similarity 0.55
- Password-less authentication via Ramanujan's 1/π series and Nvidia-B200 · hn · 2026-05-07 · 5 upvotes · similarity 0.55
- pwshguard · github · 2026-10-09 · 11 upvotes · similarity 0.55
Other launches for this product
- No other launches for this product.