#DPAPI - Twitter Etiketi

yaklaşık 1 yıl önce

🔑 A stolen #DPAPI backup key means there’s no way back to trust within your domain. In this blog, John Brown explains why standard recovery won’t cut it, and what #Microsoft really recommends. #Cybersecurity #ActiveDirectory Read the blog → https://t.co/x2loAPKhcW

sansforensics's tweet photo. 🔑 A stolen #DPAPI backup key means there’s no way back to trust within your domain. In this blog, John Brown explains why standard recovery won’t cut it, and what #Microsoft really recommends. #Cybersecurity #ActiveDirectory

Read the blog → https://t.co/x2loAPKhcW https://t.co/q42T7n4ey1

0

4

1

5

1K

CQURE Academy @CQUREAcademy

yaklaşık 1 yıl önce

Just days away from the @TechMentorEvent at Microsoft HQ! 📆 @PaulaCqure delivers two must-see cybersecurity sessions on August 12th on DPAPI and DPAPI-NG & Forensics Skillset. We hope to see you there! 👀 #Cybersecurity #TechMentor #WindowsSecurity #DPAPI

CQUREAcademy's tweet photo. Just days away from the @TechMentorEvent at Microsoft HQ! 📆

@PaulaCqure delivers two must-see cybersecurity sessions on August 12th on DPAPI and DPAPI-NG & Forensics Skillset.

We hope to see you there! 👀

#Cybersecurity #TechMentor #WindowsSecurity #DPAPI https://t.co/HfJNFw0yBX

1

7

0

187

CQURE Academy @CQUREAcademy

1 yıldan fazla bir süre önce

Join our CEO @PaulaCqure at @Microsoft HQ on August 12th for the @TechMentorEvent! 🔐 The session on #DPAPI decryption & forensics techniques + our Windows cryptographic research await you! Get your tickets here: https://t.co/RwnwEB7EWh #Cybersecurity #TechMentorConference

0

6

1

0

131

InfoSec Community

@InfoSecComm

neredeyse 2 yıl önce

🚨 New Writeup Alert! 🚨 "HTB | Office — CVE-2023–23752, Abusing MS-BKRP & GPO" by anuragtaparia is now live on IW! Check it out here: https://t.co/vuIiH6MqVm #dpapi #office #htb #cve202323752 #gpoabuse

0

2

0

1

700

Claudio Contin @claudiocontin

neredeyse 2 yıl önce

Following the recent #Windows #DPAPI talk @CHCon_nz we released a post on the recent #Chromium App Bound changes https://t.co/luv2Vem9kf

claudiocontin's tweet photo. Following the recent #Windows #DPAPI talk @CHCon_nz we released a post on the recent #Chromium App Bound changes

https://t.co/luv2Vem9kf https://t.co/z509w0VAue

0

13

11

5

2K

reverseame @reverseame

yaklaşık 2 yıl önce

Web Browser Stored Credentials #WebBrowserStoredCredentials #PenetrationTestingLab #DPAPI #CredentialAccess #SharpDPAPI https://t.co/jdykbKjeMi

0

9

5

4

816

OtterHacker @OtterHacker

2 yıldan fazla bir süre önce

I spent some time fighting with the #DPAPI to decipher data offline. Majority of the tools are all in one package and do not play well with EDR. I needed to do all of this offline, from #SCCM decryption to Chrome cloning. I hope it will help someone ! https://t.co/7fM3vP7CzJ

1

157

42

73

14K

InfoSec Pandey🥷🏻 🇮🇳 🕉️ @InfosecPandey

2 yıldan fazla bir süre önce

Detecting #browser #data theft using #Windows #EventLogs: Since 2013, #Chromium has applied the #CRYPTPROTECT_AUDIT flag to #DPAPI calls, ensuring an #audit log is generated when #decryption occurs. This aids in detecting #datatheft, with three key steps:

1

0

1

150

Lohitya Pushkar

@thewhiteh4t

3 yıldan fazla bir süre önce

https://t.co/eO7J6onD8x #dpapi #chrome #davincictf #dvctf

1

0

705

HEKATOMB @HekatombProject

yaklaşık 4 yıl önce

J'ai fais un petit article sur le fonctionnement technique de l'API de chiffrement de #Microsoft (aka #DPAPI) suite à la publication de Hekatomb : https://t.co/Agj5Yf3sgq ça permet de bien comprendre le fonctionnement du système 🙂

0

1

0

Processus @ProcessusT

yaklaşık 4 yıl önce

J'ai fais un petit article sur le fonctionnement technique de l'API de chiffrement de #Microsoft (aka #DPAPI) suite à la publication de @HekatombProject : https://t.co/Rvqtffu4O1 ça permet de bien comprendre le fonctionnement du système 🙂

1

11

0

Sam ☁️🪵 @Sam0x90

4 yıldan fazla bir süre önce

#DPAPI breakdown, this is exactly the refresh I needed this morning (uh-oh?😱). Thanks and GG @DarthSnorlax https://t.co/N8jqlty8Qe

1

2

0

Spiros Fraganastasis @m3g9tr0n

4 yıldan fazla bir süre önce

Exploring data saved by Chrome/Edge/Any Chromium https://t.co/5zAXvnmsa9 #dpapi

0

6

3

2

0

3ackd0or @3ackd0or

4 yıldan fazla bir süre önce

Unable to extract credentials via #DPAPI or #Mimikatz? Don't worry. #Microsoft has you covered. Just use 'rundll32 keymgr.dll, KRShowKeyMgr' to extract all the stored passwords on the host. #Security #BugBounty #vulnerabilities #CyberSecurity #infosec #forensics

3ackd0or's tweet photo. Unable to extract credentials via #DPAPI or #Mimikatz?
Don't worry. #Microsoft has you covered. Just use 'rundll32 keymgr.dll, KRShowKeyMgr' to extract all the stored passwords on the host.
#Security #BugBounty #vulnerabilities #CyberSecurity #infosec #forensics https://t.co/hiNy2UhSOQ

0

3

1

0

{K3lLy} Κέλλη 😻 @__LillyK3lly__

neredeyse 5 yıl önce

#Encrypting and #decrypting #Data via #Windows #DPAPI in #java by using #WinDPAPI4J #CyberSecurity #itsecurity #infosec #code #github #DEVCommunity #WomenWhoCode #GirlsWhoCode #javaprogramming 🖤🤍💙

0

3

0

GeekyHumans @geekyhumans

neredeyse 5 yıl önce

Rust Vs. Haskell: Which Language is Best for API Design? : https://t.co/jqnhLDyD8w 100DaysOfCode #DEVCommunity #CodeNewbies #code #CNG #DPAPI #Cryptography #girlswhocode #WomenWhoCode #femtech #code

0

1

0

{K3lLy} Κέλλη 😻 @__LillyK3lly__

yaklaşık 5 yıl önce

#100DaysOfCode,#DEVCommunity,#developer,#WomanWhoCode,#code,#Coding,#codinglife,#CodeNewbies,#javaprogramming,#GirlsWhoCode,#womenwhocode #bot,#aibot,#Microsoft,#java,#womenintech,#CodeNewbies #Encrypting /#decrypting Data via #Windows #DPAPI in #Java by using #WinDPAPI4J

0

5

8

0

{K3lLy} Κέλλη 😻 @__LillyK3lly__

yaklaşık 5 yıl önce

#100DaysOfCode,#DEVCommunity,#developer,#WomanWhoCode,#code,#Coding,#codinglife,#CodeNewbies,#javaprogramming,#GirlsWhoCode,#womenwhocode #bot,#aibot,#Microsoft,#java,#womenintech,#FemTech #Encrypting /#decrypting Data via #Windows #DPAPI in #Java by using #WinDPAPI4J

1

4

15

0

Blue Team News

@blueteamsec1

5 yıldan fazla bir süre önce

Aggrokatz - An Aggressor Plugin Extension For Cobalt Strike Which Enables Pypykatz To Interface With The Beacons Remotely https://t.co/zi5TfnR778 #Aggrokatz #CobaltStrike #CobaltStrike #DPAPI