Skip to content

Add dpapidump to impacket#1917

Open
laxaa wants to merge 1 commit intofortra:masterfrom
laxaa:add_dpapidump
Open

Add dpapidump to impacket#1917
laxaa wants to merge 1 commit intofortra:masterfrom
laxaa:add_dpapidump

Conversation

@laxaa
Copy link
Copy Markdown
Contributor

@laxaa laxaa commented Mar 10, 2025

As asked by the maintainers, I split the original PR #1898 to only add regsecrets.py while this one is dedicated to dpapidump.py. This current PR CI will fail until the original PR is not merged due to code required.

Rest is copy pasted from #1898 :

dpapidump.py:

This script is basically a copy of the SystemDPAPIdump.py from @clavoillotte in #1137 that integrates the extraction of secrets from regsecrets.py while integrating other small modifications:

  • The collections of information related to SCCM in the WMI database has been enhanced to match those retrieved by sccmhunter.
  • Disable the retrieval of the credentials file related to virtualapp/didlogical, this credential has always the same file name and does not contain useful information security wise.
  • Various small bug fixes and code improvements.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

medium Medium priority item

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants