nosferatu. Windows NTLM Authentication Backdoor
winfilter. Winlogon and LSA Notification Password Filters