HiveBrain v1.2.0
Get Started
← Back to all entries
snippetbashTip

mimikatz dpapi — Interact with the Windows Data Protection API (DPAPI). More information: <https://github.com/gentilk

Submitted by: @import:tldr-pages··
0
Viewed 0 times
tldrwindowsmimikatz dpapicommand-linecli
thecommandwindowsmimikatz dpapiinteractcliwithdata
windows

Problem

How to use the mimikatz dpapi command: Interact with the Windows Data Protection API (DPAPI). More information: <https://github.com/gentilkiwi/mimikatz>.

Solution

mimikatz dpapi — Interact with the Windows Data Protection API (DPAPI). More information: <https://github.com/gentilkiwi/mimikatz>.

List master keys:
mimikatz "dpapi::masterkey /list"


Decrypt a DPAPI blob:
mimikatz "dpapi::blob /in:blob_file.bin"


Retrieve Chrome credentials using DPAPI:
mimikatz "dpapi::chrome /in:Login Data"

Code Snippets

List master keys

mimikatz "dpapi::masterkey /list"

Decrypt a DPAPI blob

mimikatz "dpapi::blob /in:blob_file.bin"

Retrieve Chrome credentials using DPAPI

mimikatz "dpapi::chrome /in:Login Data"

Context

tldr-pages: windows/mimikatz dpapi

Revisions (0)

No revisions yet.