MasterKeyBrute
Bruteforce DPAPI encrypted MasterKey File from Windows Credentials Manager
Usage
MasterKeyBrute uses Impacket syntax :
**************************************************
MASTERKEYBRUTE
@Processus
v1.0
**************************************************
usage: masterkeybrute.py [-h] -mkf MKF -sid SID -w W [--blob BLOB] [--show-prekeys SHOW_PREKEYS] [-debug]
Bruteforce DPAPI encrypted MasterKey File from Windows Credentials Manager
options:
-h, --help show this help message and exit
-mkf MKF Master Key File
-sid SID User SID to derivate key
-w W Wordlist file
Optionnal:
--blob BLOB Blob file to decrypt with decrypted MasterKey
--show-prekeys SHOW_PREKEYS
Show calculated prekeys
Verbosity:
-debug Turn DEBUG output ON
Example
python3 masterkeybrute.py -mkf d5a8f4c9-a8ab-423a-a027-601472215dff -sid S-1-5-21-2097421949-534903256-19675394-500 -w /opt/rockyou.txt --blob 5AEA058AA7D881EBF78E4BE4515E5159 -debug
Metadata
Release files for masterkeybrute 1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| masterkeybrute-1.1-py3-none-any.whl | Python 3 | none | any | Details |
Release files / masterkeybrute-1.1-py3-none-any.whl
| Download URL | masterkeybrute-1.1-py3-none-any.whl |
|---|---|
| Size | 4.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
c17ca8ae5e1e7f7d8f73031ac54c57f6c35c533a20e4e2040c51f7b8d42e6ec6
|
|
BLAKE2b-256 checksum How to use checksums |
4e257d395fcffcb6116187852bb6d8f5b4c649697b6b9cc6d64a4a3f99b5541e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.0.1 CPython/3.11.9
|