Overview

Dump user password hashes using DPAPI.

Dependencies

• credentials

Pre-requisites

• High Integrity process

Operating Systems

• Windows

Example

DomainName : DESKTOP-LMCH70V
UserName   : helpdesk
Lm         : 00000000000000000000000000000000
Ntlm       : bc007082d32777855e253fd4defe70ee
Sha1       : c44e77aa5d3caed6ca7e9e59f553fe64ce4000d2
Dpapi      : 00000000000000000000000000000000