dpapi blob command

Jump to bottom

skelsec edited this page Apr 13, 2021 · 2 revisions

What it does

Decrypts a blob file using the (already decrypted) masterkey file.

Remarks

None

Requirements

Decrypted Mastekey file (I hope you haven't forgot to use -o)
The blob file or the hex string representing the blob

Subcommands

None

Switches

None

Examples

pypykatz dpapi blob mkf.json blobfile.dat: Decrypts the blob file.