😈 [ m3g9tr0n, Spiros Fraganastasis ]

Exploring data saved by Chrome/Edge/Any Chromium
https://t.co/5zAXvnmsa9 #dpapi

🔗 https://gist.github.com/jhoneill/e585bae781f3efa7ac1992b79e037713

🐥 [ tweet ]

😈 [ OtterHacker @OtterHacker ]

I spent some time fighting with the #DPAPI to decipher data offline. Majority of the tools are all in one package and do not play well with EDR. I needed to do all of this offline, from #SCCM decryption to Chrome cloning. I hope it will help someone !

🔗 https://otterhacker.github.io/Pentest/Techniques/DPAPI.html

🐥 [ tweet ]