ProcessusT / HEKATOMB

Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.
510Updated 6 months ago

Alternatives and similar repositories for HEKATOMB:

Users that are interested in HEKATOMB are comparing it to the libraries listed below