DPAPI - The Spice of Encryption
BSides SATX via YouTube
Earn Your CS Degree, Tuition-Free, 100% Online!
Learn Excel & Financial Modeling the Way Finance Teams Actually Use Them
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Dive into the intricacies of Windows' Data Protection API (DPAPI) in this 25-minute conference talk by Jacob Villarreal at BSides SATX. Gain a comprehensive understanding of DPAPI's functionality and its exploitation for credential dumping. Explore the encryption mechanisms used by popular applications like Chrome and Edge's password managers. Examine the code and requirements for data encryption and decryption processes. Discover techniques to abuse DPAPI, including methods for establishing Domain Persistence through the extraction of Domain Controllers' Backup Key. Enhance your knowledge of Windows security and potential vulnerabilities in this informative session scheduled for June 8, 2024, at 11:00 AM in Track 1 (UC Conference Room A).
Syllabus
2024-06-08, 11:00–, Track 1 UC Conference Rm A
Taught by
BSides SATX