recreating known universal windows password backdoors with Frida

This post demonstrates using Frida to dynamically instrument lsass.exe on Windows to prototype and implement local authentication backdoors: first by intercepting RtlCompareMemory to detect a specific backdoor password's MD4, and second by overriding MsvpPasswordValidate to accept any password. The author documents detection of relevant calls, backtraces, proof-of-concept Frida scripts, and building a standalone Frida-based executable to enable the technique.