One Day Sec

What issue does RdpThief encounter on Windows 7 and what are the recommended solutions?

On Windows 7, RdpThief fails to capture the server name because the hooked API `SspiPrepareForCredRead` does not exist. One solution is to hook `CredReadW` instead, which does record the Server name. Alternatively, after a remote desktop connection is established, you can read the server name from the registry via the remote desktop connection history. Both approaches restore full credential capture on Windows 7.
Windows 7SspiPrepareForCredReadCredReadWserver nameremote desktop history

Browse all Q&A →