RepoMirrors/DonPAPI
1
0
Fork 0
mirror of https://github.com/login-securite/DonPAPI synced 2025-02-03 05:01:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Patching PVK decryption fuckup

Browse Source
This commit is contained in:
Pierre-Alexandre Vandewoestyne 2022-01-29 15:44:10 +01:00
parent 98729b1596
commit 9fb50bfef7
1 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/dpapi.py
View File

@ -268,11 +268,17 @@ class DPAPI:
decryptedKey = cipher.decrypt(dk['SecretData'][::-1], None)
if decryptedKey:
try:
domain_master_key = DPAPI_DOMAIN_RSA_MASTER_KEY(decryptedKey)
key = domain_master_key['buffer'][:domain_master_key['cbMasterKey']]
self.logging.debug('Decrypted key with domain backup key provided')
self.logging.debug('Decrypted key: 0x%s' % hexlify(key).decode('latin-1'))
return '0x%s' % hexlify(key).decode('latin-1')
except: # on extrait l'info en dur
self.logging.debug('excepted, maybe because of a known DPAPI_PVK fuckup. trying to adjust ... ')
key = decryptedKey[8:96 + 8 - 32]
self.logging.debug('Decrypted key: 0x%s' % hexlify(key).decode('latin-1'))
return '0x%s' % hexlify(key).decode('latin-1')
else:
logging.debug("Error in decryptedKey with PVK")
# Lets try to decrypt it with another method