DPAPI Demystified - Abusing The Windows Data Protection API One Secret At A Time
BSidesMunich via YouTube
Launch a New Career with Certificates from Google, IBM & Microsoft
Get 20% off all career paths from fullstack to AI
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore the Windows Data Protection API (DPAPI) in this 31-minute conference talk that demystifies how this critical Windows security mechanism works and reveals methods for exploiting it. Learn about DPAPI's architecture, understand how Windows uses it to protect sensitive data like passwords and encryption keys, and discover techniques for extracting and abusing stored secrets. Examine real-world attack scenarios where adversaries can leverage DPAPI weaknesses to access protected information, analyze the security implications of DPAPI implementation flaws, and understand defensive strategies to mitigate these risks. Gain practical insights into how attackers can systematically compromise DPAPI-protected data and develop a deeper understanding of Windows credential storage mechanisms for both offensive and defensive security purposes.
Syllabus
DPAPI Demystified: Abusing The Windows Data Protection API One Secret At A Time - Daniel Küppers
Taught by
BSidesMunich