Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI + web UI.
☆31Sep 23, 2026Updated last month
Alternatives and similar repositories for dpapi-toolkit
Users that are interested in dpapi-toolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆68Sep 17, 2026Updated last month
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆114Oct 6, 2026Updated last month
- Automated HTTP/HTTPS simulation for Cobalt Strike Malleable C2 profiles☆29Sep 3, 2026Updated 2 months ago
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆22Oct 4, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Tools for CES abuse☆50Sep 29, 2026Updated last month
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- Ask the Web Account Manager (WAM) for Entra ID tokens☆167Sep 11, 2026Updated last month
- SpicyAD is a C# Active Directory penetration testing tool designed for authorized security assessments. It combines multiple AD attack te…☆111Sep 9, 2026Updated last month
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- Active Directory snapshots from Linux and macOS in the AD Explorer .dat format. Opens in AD Explorer, works with ADExplorerSnapshot.py an…☆38Sep 11, 2026Updated last month
- A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself☆103Apr 9, 2026Updated 6 months ago
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 5 months ago
- Repository for various Beacon Object Files (BOFs)☆185Oct 22, 2026Updated 2 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Async BOF to monitor and detect clipboard changes on a target system and return the clipboard contents.☆22Jul 23, 2026Updated 3 months ago
- Remote process injection via TP_DIRECT.Callback hijack☆41Oct 30, 2026Updated last week
- another PrivEsc potato...☆122Sep 5, 2026Updated 2 months ago
- Group3r but in Python☆64Oct 11, 2026Updated 3 weeks ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆78Oct 10, 2026Updated 3 weeks ago
- vbkview is a tool designed to browse and extract data from unencrypted Veeam backups.☆15Jul 20, 2026Updated 3 months ago
- Python scripts that helps in the development of PPKG binaries☆16Jul 31, 2026Updated 3 months ago
- ☆46Jul 1, 2026Updated 4 months ago
- ☆37May 19, 2026Updated 5 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Tunneling tool for red teaming, designed to run in memory on a windows target and connect back to a Linux VPS so you can proxy tools into…☆54Aug 3, 2026Updated 3 months ago
- Pass-the-Passkey Family of Attacks☆234Sep 14, 2026Updated last month
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆75Jul 14, 2026Updated 3 months ago
- Automatically Download & Compile Useful BOFs for CS☆27Jul 29, 2026Updated 3 months ago
- Piclang is statically typed programming language that compiles to raw position-independent x86-64 shellcode, purpose-built for developmen…☆27Jul 23, 2026Updated 3 months ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆139Jul 23, 2026Updated 3 months ago
- ☆91Sep 3, 2026Updated 2 months ago
- ☆19Dec 25, 2025Updated 10 months ago
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆296Jun 22, 2026Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- (STILL.. EDR-evading) Password hash dumper for MacOS☆21Jul 8, 2026Updated 3 months ago
- POC to decrypt SmartDeploy encrypted credentials☆12Aug 13, 2025Updated last year
- A vibe-coded port of wiretap☆37Updated this week
- Audiodg.exe DLL hijacking for LPE with reboot-free restart primitive. Executes code as LOCAL SERVICE, escalates to SYSTEM via Scheduled T…☆129Jan 24, 2026Updated 9 months ago
- Beacon Object File (BOF) to coerce machine account auth via IPP.☆98Updated this week