#DPAPI - Twitter Hashtag

about 1 year ago

🔑 A stolen #DPAPI backup key means there’s no way back to trust within your domain. In this blog, John Brown explains why standard recovery won’t cut it, and what #Microsoft really recommends. #Cybersecurity #ActiveDirectory Read the blog → https://t.co/x2loAPKhcW

sansforensics's tweet photo. 🔑 A stolen #DPAPI backup key means there’s no way back to trust within your domain. In this blog, John Brown explains why standard recovery won’t cut it, and what #Microsoft really recommends. #Cybersecurity #ActiveDirectory

Read the blog → https://t.co/x2loAPKhcW https://t.co/q42T7n4ey1

0

4

1

5

1K

CQURE Academy @CQUREAcademy

about 1 year ago

Just days away from the @TechMentorEvent at Microsoft HQ! 📆 @PaulaCqure delivers two must-see cybersecurity sessions on August 12th on DPAPI and DPAPI-NG & Forensics Skillset. We hope to see you there! 👀 #Cybersecurity #TechMentor #WindowsSecurity #DPAPI

CQUREAcademy's tweet photo. Just days away from the @TechMentorEvent at Microsoft HQ! 📆

@PaulaCqure delivers two must-see cybersecurity sessions on August 12th on DPAPI and DPAPI-NG & Forensics Skillset.

We hope to see you there! 👀

#Cybersecurity #TechMentor #WindowsSecurity #DPAPI https://t.co/HfJNFw0yBX

1

7

0

187

CQURE Academy @CQUREAcademy

over 1 year ago

Join our CEO @PaulaCqure at @Microsoft HQ on August 12th for the @TechMentorEvent! 🔐 The session on #DPAPI decryption & forensics techniques + our Windows cryptographic research await you! Get your tickets here: https://t.co/RwnwEB7EWh #Cybersecurity #TechMentorConference

0

6

1

0

131

InfoSec Community

@InfoSecComm

almost 2 years ago

🚨 New Writeup Alert! 🚨 "HTB | Office — CVE-2023–23752, Abusing MS-BKRP & GPO" by anuragtaparia is now live on IW! Check it out here: https://t.co/vuIiH6MqVm #dpapi #office #htb #cve202323752 #gpoabuse

0

2

0

1

700

Claudio Contin @claudiocontin

almost 2 years ago

Following the recent #Windows #DPAPI talk @CHCon_nz we released a post on the recent #Chromium App Bound changes https://t.co/luv2Vem9kf

claudiocontin's tweet photo. Following the recent #Windows #DPAPI talk @CHCon_nz we released a post on the recent #Chromium App Bound changes

https://t.co/luv2Vem9kf https://t.co/z509w0VAue

0

13

11

5

2K

reverseame @reverseame

about 2 years ago

Web Browser Stored Credentials #WebBrowserStoredCredentials #PenetrationTestingLab #DPAPI #CredentialAccess #SharpDPAPI https://t.co/jdykbKjeMi

0

9

5

4

816

OtterHacker @OtterHacker

over 2 years ago

I spent some time fighting with the #DPAPI to decipher data offline. Majority of the tools are all in one package and do not play well with EDR. I needed to do all of this offline, from #SCCM decryption to Chrome cloning. I hope it will help someone ! https://t.co/7fM3vP7CzJ

1

157

42

73

14K

InfoSec Pandey🥷🏻 🇮🇳 🕉️ @InfosecPandey

over 2 years ago

Detecting #browser #data theft using #Windows #EventLogs: Since 2013, #Chromium has applied the #CRYPTPROTECT_AUDIT flag to #DPAPI calls, ensuring an #audit log is generated when #decryption occurs. This aids in detecting #datatheft, with three key steps:

1

0

1

150

Lohitya Pushkar

@thewhiteh4t

over 3 years ago

https://t.co/eO7J6onD8x #dpapi #chrome #davincictf #dvctf

1

0

705

HEKATOMB @HekatombProject

about 4 years ago

J'ai fais un petit article sur le fonctionnement technique de l'API de chiffrement de #Microsoft (aka #DPAPI) suite à la publication de Hekatomb : https://t.co/Agj5Yf3sgq ça permet de bien comprendre le fonctionnement du système 🙂

0

1

0

Processus @ProcessusT

about 4 years ago

J'ai fais un petit article sur le fonctionnement technique de l'API de chiffrement de #Microsoft (aka #DPAPI) suite à la publication de @HekatombProject : https://t.co/Rvqtffu4O1 ça permet de bien comprendre le fonctionnement du système 🙂

1

11

0

Sam ☁️🪵 @Sam0x90

over 4 years ago

#DPAPI breakdown, this is exactly the refresh I needed this morning (uh-oh?😱). Thanks and GG @DarthSnorlax https://t.co/N8jqlty8Qe

1

2

0

Spiros Fraganastasis @m3g9tr0n

over 4 years ago

Exploring data saved by Chrome/Edge/Any Chromium https://t.co/5zAXvnmsa9 #dpapi

0

6

3

2

0

3ackd0or @3ackd0or

over 4 years ago

Unable to extract credentials via #DPAPI or #Mimikatz? Don't worry. #Microsoft has you covered. Just use 'rundll32 keymgr.dll, KRShowKeyMgr' to extract all the stored passwords on the host. #Security #BugBounty #vulnerabilities #CyberSecurity #infosec #forensics

3ackd0or's tweet photo. Unable to extract credentials via #DPAPI or #Mimikatz?
Don't worry. #Microsoft has you covered. Just use 'rundll32 keymgr.dll, KRShowKeyMgr' to extract all the stored passwords on the host.
#Security #BugBounty #vulnerabilities #CyberSecurity #infosec #forensics https://t.co/hiNy2UhSOQ

0

3

1

0

{K3lLy} Κέλλη 😻 @__LillyK3lly__

almost 5 years ago

#Encrypting and #decrypting #Data via #Windows #DPAPI in #java by using #WinDPAPI4J #CyberSecurity #itsecurity #infosec #code #github #DEVCommunity #WomenWhoCode #GirlsWhoCode #javaprogramming 🖤🤍💙

0

3

0

GeekyHumans @geekyhumans

almost 5 years ago

Rust Vs. Haskell: Which Language is Best for API Design? : https://t.co/jqnhLDyD8w 100DaysOfCode #DEVCommunity #CodeNewbies #code #CNG #DPAPI #Cryptography #girlswhocode #WomenWhoCode #femtech #code

0

1

0

{K3lLy} Κέλλη 😻 @__LillyK3lly__

about 5 years ago

#100DaysOfCode,#DEVCommunity,#developer,#WomanWhoCode,#code,#Coding,#codinglife,#CodeNewbies,#javaprogramming,#GirlsWhoCode,#womenwhocode #bot,#aibot,#Microsoft,#java,#womenintech,#CodeNewbies #Encrypting /#decrypting Data via #Windows #DPAPI in #Java by using #WinDPAPI4J

0

5

8

0

{K3lLy} Κέλλη 😻 @__LillyK3lly__

about 5 years ago

#100DaysOfCode,#DEVCommunity,#developer,#WomanWhoCode,#code,#Coding,#codinglife,#CodeNewbies,#javaprogramming,#GirlsWhoCode,#womenwhocode #bot,#aibot,#Microsoft,#java,#womenintech,#FemTech #Encrypting /#decrypting Data via #Windows #DPAPI in #Java by using #WinDPAPI4J

1

4

15

0

Blue Team News

@blueteamsec1

over 5 years ago

Aggrokatz - An Aggressor Plugin Extension For Cobalt Strike Which Enables Pypykatz To Interface With The Beacons Remotely https://t.co/zi5TfnR778 #Aggrokatz #CobaltStrike #CobaltStrike #DPAPI