Dpapi Category

blog
5+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Dpapi blog

Filters

  • Credential Dumping on Windows: LSASS, SAM, DPAPI and NTDS.dit
    guides-resources

    Credential Dumping on Windows: LSASS, SAM, DPAPI and NTDS.dit

    Credential dumping on Windows: NTLM hash and Kerberos tickets from LSASS, SAM, LSA Secrets, DPAPI and NTDS.dit with Mimikatz, ProcDump and secretsdump on Active Directory

    Discover more Discover more
  • Voleur HTB: Writeup with Kerberoasting, DPAPI and WSL Privesc
    walkthroughs

    Voleur HTB: Writeup with Kerberoasting, DPAPI and WSL Privesc

    Voleur's full walkthrough of Hack The Box: targeted Kerberoasting, AD Recycle Bin abuse, DPAPI chaining, and privilege escalation via WSL to Administrator.

    Discover more Discover more
  • DPAPI Attack in Active Directory: Extract Encrypted Passwords and Masterkeys
    windows

    DPAPI Attack in Active Directory: Extract Encrypted Passwords and Masterkeys

    Complete guide on DPAPI in an Active Directory pentest: masterkey, credential files, Chrome/Edge offline with pypykatz, LSASS dump LOLBin, DSInternals and DonPAPI.

    Discover more Discover more
  • SharpChrome: Dump Browser Credentials from Windows (DPAPI Abuse)
    windows

    SharpChrome: Dump Browser Credentials from Windows (DPAPI Abuse)

    SharpChrome: Dump Browser Credentials from Windows (DPAPI Abuse)

    Discover more Discover more
  • SharpDPAPI: DPAPI Abuse to Decrypt Credentials on Windows
    windows

    SharpDPAPI: DPAPI Abuse to Decrypt Credentials on Windows

    SharpDPAPI allows you to extract and decrypt DPAPI-protected credentials on Windows. This advanced tool is for credential access and lateral movement.

    Discover more Discover more