Lead AI-Native Products with Microsoft's Agentic AI Program
Stuck in Tutorial Hell? Learn Backend Dev the Right Way
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore groundbreaking discoveries in DPAPI (Data Protection API) and DPAPI-NG research presented at Hack in Paris. Learn how to decrypt DPAPI-protected data using a 'backup key' stored as an LSA Secret on domain controllers, enabling access to all domain users' secrets, including passwords, private keys, and browser information. Discover a method to decrypt SID-protected PFX files without user passwords by generating SID and user tokens. Understand the implications of these findings for Windows 8, 8.1, 10, and related Windows Server versions. Gain insights into potential security vulnerabilities and their management in enterprise environments. Watch as Paula Januszkiewicz, CEO and security researcher, demonstrates these unique discoveries and provides tools for further exploration.
Syllabus
HIP19: DPAPI and DPAPI-NG Decrypting All Users’ Secrets and PFX Passwords - P. Januskiewicz
Taught by
Hack in Paris