> For the complete documentation index, see [llms.txt](https://www.heresecurity.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/nppspy-ji-lu-mi-ma.md).

# NPPSpy记录密码

```
https://github.com/gtworek/PSBits/blob/master/PasswordStealing/NPPSpy/NPPSPy.c
默认保存位置是C盘根目录，可以修改重新编译
```

![image](https://raw.githubusercontent.com/xiaoy-sec/Pentest_Note/master/img/729.png)

```
将DLL放入system32文件夹内
```

![image](https://raw.githubusercontent.com/xiaoy-sec/Pentest_Note/master/img/730.png)

```
执行ps1脚本自动添加注册表
```

![image](https://raw.githubusercontent.com/xiaoy-sec/Pentest_Note/master/img/731.png)

```
无需重启
```

![image](https://raw.githubusercontent.com/xiaoy-sec/Pentest_Note/master/img/732.png)