SharpDPAPI
SharpDPAPI copied to clipboard
GhostPack
SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
Hi Will, I think This command doesn't work anymore: `SharpChrome.exe cookies /unprotect` since the location of the cookie file is now C:\Users\*\AppData\Local\Google\Chrome\User Data\Default\Network. output taken From the BH2022 ATTA lab:...
Added the SCCM command to the machinetriage wrapper. Also significantly cleaned up the SCCM command's output.
When debugging the SharpDPAPI with below config/flags, I had an questions on why the pointer is not showing in the correct address as the debugger says.   Then I...
Add /out flag to the `blob` command to output raw decrypted data.
The `blob` command fails when passed a `{GUID}:SHA1` string. If the same key-value pair is passed in a file with the `/mkfile` flag, it works as expected.
SharpDPAPI request: Print a notification message if there are 0 Window credentials or Vault entries (Posting for a friend: i.e., @tifkin_ 😄 )
Hello Mate, Loving SharpChrome and thanks for a wonderful project. I was wondering if the option to export cookies in the NetScape cookie format could be added? It's tab delimited...
Hello Based on the article (https://posts.specterops.io/the-phantom-credentials-of-sccm-why-the-naa-wont-die-332ac7aa1ab9). I made a method to parse the objects.data file and retrieve NAA creds on disk. Example: ``` .\SharpDPAPI sccm /useobjectfile ``` or from a...
Running SharpDPAPI with `masterkeys /hashes`` is not working as expected in README. It asks for pvk or password where it should dump John ready to crack. 
 Got error when Chrome is open. Using SharpChrome v1.12.0, Windows 11, Google Chrome Version 122.0.6261.129 ``` System.NullReferenceException: Object reference not set to an instance of an object. at SharpChrome.Chrome.ParseChromeCookies(Dictionary`2...
