
dpapi-toolkit
Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI +…

Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI +…

A proof-of-concept for (CVE-2023-38840) that extracts plaintext master passwords from a locked Bitwarden vault.

Extracts KeePass master passwords from memory dumps of unlocked databases, outputting potential characters by position, a passphrase, and a…

KeePass Master Password Extraction PoC for Linux

Retrieves the master password from Keepass memory dump, using a hint of bruteforce.

Retrieve the master password of a keepass database <= 2.53.1

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

Collecting & Hunting for IOCs with gusto and style

Python script for carving Bitlocker VMK keys

Script to check for IOC's created by ProxyNotShell (CVE-2022-41040 & CVE-2022-41082)