dpapi minidump command

Jump to bottom

skelsec edited this page Apr 13, 2021 · 2 revisions

What it does

Parses the LSASS minidump file and extracts all prekeys and masterkeys stored there.

Remarks

I'd suggest to use the -o parameter, it will help you on your journey.

Requirements

LSASS minidump file :)

Subcommands

None

Switches

-o: Writes the prekeys in a text file and masterkeys in a separate json file.

Examples

pypykatz dpapi minidump lsass.dmp -o dpapi_keys: Parses the minidump file and writes the keys to two separate files.