[go: up one dir, main page]
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Problem with Decrypting Masterkeys #433

Open
AgentGrady opened this issue Sep 3, 2023 · 2 comments
Open

Problem with Decrypting Masterkeys #433

AgentGrady opened this issue Sep 3, 2023 · 2 comments

Comments

@AgentGrady
Copy link

I have been trying to decrypt masterkeys with the masterkey function but it does nothing not even give a reason why it will not decrypt it.
image

Plus, I have been attempting to decrypt the opera passwords that are encrypted with it but even when I get the right master key I get this error plus it gives multiple masterkeys for the Google passwords even though it should only be one.

image

What are causing these issues and how can I resolve them?
@BubbleMaker2089
Copy link

You need to obtain sha1 first using sekurlsa::logonpasswords (works for Win10, on Win11 it won't return sha1). Then, sha1 will be cached. And only after that use dpapi::masterkey command. You can also provide sha1 to dpapi::masterkey by /hash argument. See for details: https://tools.thehacker.recipes/mimikatz/modules/dpapi/masterkey

@AgentGrady
Copy link
Author

You need to obtain sha1 first using sekurlsa::logonpasswords (works for Win10, on Win11 it won't return sha1). Then, sha1 will be cached. And only after that use dpapi::masterkey command. You can also provide sha1 to dpapi::masterkey by /hash argument. See for details: https://tools.thehacker.recipes/mimikatz/modules/dpapi/masterkey

Thank you, the operating system I am using is windows 10 but the files I am trying to decrypt are from a windows 10 back up or a laptop that had failed. Would sekurlsa::logonpasswords work for that back files or does that command not work under windows 11 in any case?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@AgentGrady @BubbleMaker2089