Reversing DPAPI and Stealing Windows Secrets Offline - 4 views
-
Joel Bennett on 31 Jul 12Show how DPAPI, the Windows API for safe data storage on disk works, and reveals how it's possible to recover all the previous passwords used by any user on a system. Provides an open-source tool for DPAPI data decryption and previous password extraction called DPAPIck.