-
Notifications
You must be signed in to change notification settings - Fork 379
live dpapi
skelsec edited this page Apr 14, 2021
·
2 revisions
The submodules under DPAPI will provide three sets of commands.
- Acquires ALL DPAPI key material that will help you to decrypt every DPAPI protected secrets stored on the machine you execute pypykatz on.
keys
- This help you to decrypt secrets which were protected with DPAPI under the CURRENT USER's context.
vpol
vcred
cred
blob
blobfile
securestring
securestringfile
chrome
- Acquire credentials which stored with the machine account
wifi
For the terminology, working of DPAPI pls check the 'normal' DPAPI wiki page