Skip to content

About

Windows Credential Provider and Authentication Package samples

Topics

Resources

Stars

9 stars

Watchers

0 watching

Forks

Repository files navigation

Project Description
AuthPkgTester Tool for testing custom authentication packages.
CredUITester Tool for testing CredUI-based authentication
NoPasswordAuthPkg Sample authentication package to allow interactive logon without having to type the password.
ReversePasswordCredProv Sample Windows Credential Provider that requires the password to be typed backwards.
ReversePasswordEventProv Event provider for logging to the Windows Event Viewer.
WebCredMgr Read and write to the Windows Credential Manager secure storage.

How to test

It's recommended to test in a disposable Virtual Machine (VM), since credential provider problems might break the windows logon screen. You don't want to risk that on your main computer.

Build steps

  • Open solution in Visual Studio and build the projects in release or debug mode.

Installation steps

  • Copy the build artifacts to the test environment.
  • Run REGISTER_ReversePasswordCredProv.bat as administrator.

Test steps

  • Log screen, log out or restart the computer.

  • Observe that there's now a new "RP" sign-in option that requires the password to be typed backwards:
    screenshot

  • It's also possible to test the "RP" credential provider by either right-clicking on an application in the Windows start menu, and selecting "Run as administrator", or run Start-Process cmd.exe -Verb RunAs from PowerShell:
    UACPrompt

Password avoidance

Password entering can be avoided altogether if NoPasswordAuthPkg is also installed and a removable drive with a magic file present. This can be done by running Install_NoPasswordAuthPkg.ps1 as administrator and restarting afterwards.

Uninstallation steps

  • Right click on UNREGISTER_ReversePasswordCredProv.bat and select "Run as administrator".

Authentication and logon documentation

User session and authentication

Credential provider

Security and authentication packages

Windows Credential manager

Windows Credential Manager lets users store credentials relevant to other systems and websites in the secure Windows Vault. It is not used for local on-device authentication.

Links:

  • GUI tool: control.exe keymgr.dll
  • Microsoft wincred.h API listing (use CredWriteW and CredReadW)

About

Windows Credential Provider and Authentication Package samples

Topics

Resources

Stars

9 stars

Watchers

0 watching

Forks

Releases

Used by

Contributors

Languages