Skip to content

Add "/rpc" flag to ask domain controller to decrypt user master key for us#27

Merged
HarmJ0y merged 3 commits into
GhostPack:masterfrom
Kiblyn11:feat/masterkeyRpc
Apr 18, 2023
Merged

Add "/rpc" flag to ask domain controller to decrypt user master key for us#27
HarmJ0y merged 3 commits into
GhostPack:masterfrom
Kiblyn11:feat/masterkeyRpc

Conversation

@Kiblyn11

Copy link
Copy Markdown

I worked with @rashbx1 to bring new feature to SharpDPAPI.

  • Add "/rpc" flag to mimic Mimikatz feature which allows to ask domain controller to decrypt domain user master key by providing him backup key.
  • It allows for an interesting use case to decrypt domain user DPAPI secrets if we don't know his password
  • Using this feature on SharpDPAPI will be more convenient than to use Mimikatz
  • Tested and working on x64, but I have an issue on x86 regarding RPC communication interface, I am working on it but as x86 is getting less supported that might wait and should not hinder this PR
  • I did not see any contributing guidelines, let me know if something is not okay

image

@HarmJ0y

HarmJ0y commented Apr 18, 2023

Copy link
Copy Markdown
Member

This is awesome and something we've really wanted for a while! I'm reviewing now and then will land if everything is good, sorry this took so long @Kiblyn11 !

@HarmJ0y

HarmJ0y commented Apr 18, 2023

Copy link
Copy Markdown
Member

Works like a charm, landed!

@HarmJ0y HarmJ0y merged commit 82e8f94 into GhostPack:master Apr 18, 2023
@rashbx1

rashbx1 commented Apr 19, 2023

Copy link
Copy Markdown

Perfect :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants