Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
-
Updated
Apr 8, 2025 - C++
Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
By manipulating LSASS memory flags like UseLogonCredential and IsCredGuardEnabled, this repo demonstrates how Credential Guard can be bypassed—restoring cleartext credentials despite the protection appearing active. Requires SYSTEM-level access and targets VBS-based defenses.
Add a description, image, and links to the credential-guard topic page so that developers can more easily learn about it.
To associate your repository with the credential-guard topic, visit your repo's landing page and select "manage topics."