Crypto, crypto everywhere [new] crypto::capi patch DSS CSP (experimental) [new] crypto::keys export DSA, EC keys [new] crypto::kutil import PEM, DER, PKCS#8, CAPI blob & CNG blob when possible, convert it to PKCS#8, or make a PKCS#12 with a PEM or DER certificate [new] dpapi::capi & dpapi::cng export private keys in PVK format for legacy (RSA & DSA) or PKCS#8 for others (like EC) [new] crypto:: & dpapi:: keys & cert functions with more informations
Assets
4
[new] crypto::scauth /sha1 (RSA SHA1 signature algorithm instead of d… …efault RSA SHA256) [new] crypto::scauth /keysize:x (RSA key size instead of default 2048 bits) [new] crypto::scauth /cahash:SHA1 (to search for CA by its SHA1 instead of /caname) [new] crypto::scauth /cn:w /o:x /ou:y /c:z (to specify DN fields instead of defaults UPN, mimikatz, NULL and FR) [new] dpapi::luna (to decrypt slot password with KSP configuration)
Assets
4
New DPAPI stuff & crypto [new] dpapi::masterkey now supports SID with SYSTEM_DPAPI (for @dirkjanm services ;)) [new] dpapi::cache filter non relevant SIDs [new] dpapi::cred now supports WinInet double DPAPI [new] dpapi::blob /raw for hex input [new] dpapi::blob /ascii to force ascii output (when not unicode data) [new] crypto:: & dpapi::cng key & certificates flags from current SDK (VSM) [new] sr98::nedap module (@iceman1001 <3) [new] lsadump::mbc to dump MachineBoundCertificate
Assets
4
A commit to make Carlos @darkoperator happy [new] mimikatz lsadump::cache /dcc:<hash> to support pushing a previous one without knowing NTLM or password [new] mimikatz misc::lock to lock the session of current user/all users if available (privilege::debug) [fix #220] that damn wcsicmp/_wcsicmp ;)
