Hey, I heard you like creds! You might like this adaptation of some of @gentilkiwi's DPAPI Mimikatz work: github.com/GhostPack/SharpDP… ("Troopers Edition"). Unfamiliar with DPAPI? Check out harmj0y.net/blog/redteaming/… . Also, @gentilkiwi was right:

8:18 PM · Mar 25, 2019

1
182
367
Replying to @harmj0y @gentilkiwi
I recently discovered this is also how saved credentials in Outlook are encrypted... Feature request :)
0
0
0