Skip to main content

DPAPI decryption toolkit

Project description


DPAPIck is a python toolkit to provide a platform-independant implementation
of Microsoft's cryptography subsytem called DPAPI (Data Protection API).

It can be used either as a library or as a standalone tool.

It is also the first open-source tool that allows decryption of DPAPI
structures in an offline way and, moreover, from another plateform than

It is provided with some application probes that includes the built-in logic
to retreive the corresponding secrets that are protected.

To have more information or to contact us, go to our website:


This application has been developped and tested on python 2.7.

M2Crypto is required to provide all the requireds algorithms. To obtain it,

Probes and other tool may require other modules to be able to retreive
information such as:
* python-sqlite3 for Google Chrome password database
* CFPropertyList for Apple Safari keychain.plist
* python-registry for low-level manipulation of hives
* pyASN1 for the RSA key pair manipulation

We also recommend the use of MoonSols Windows Memory Toolkit to convert
hibernation file to usable memory dumps and be able to extract credentials
from it.
For more information about Moonsols products, see <>


DPAPIck is written by Jean-Michel Picod (
with the help from Ivan Fontarensky (
who work for the Cyber Security Center of Cassidian, an EADS company,
and Elie Bursztein (


This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation version 3 of the License.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program. If not, see <>.

Project details

Release history Release notifications | RSS feed

This version


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

dpapick-0.3.tar.gz (78.8 kB view hashes)

Uploaded source

Built Distributions

dpapick-0.3-py2.7.egg (83.5 kB view hashes)

Uploaded 2 7

dpapick-0.3-py2-none-any.whl (39.5 kB view hashes)

Uploaded py2

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring Fastly Fastly CDN Google Google Object Storage and Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page