-
Notifications
You must be signed in to change notification settings - Fork 31
pkg dpapi
Jacob Paullus edited this page Apr 17, 2026
·
1 revision
Parse and decrypt Windows Data Protection API blobs, master keys, credential files, and vaults.
| Type | Description |
|---|---|
DPAPIBlob |
Encrypted DPAPI blob structure |
MasterKey |
DPAPI master key |
Credential |
Decrypted Windows credential |
CredentialFile |
DPAPI credential file |
| File | Description |
|---|---|
dpapi.go |
DPAPI blob structure and AES/3DES decryption |
backupkey.go |
Domain DPAPI backup key extraction (via BKRP RPC) |
credhist.go |
Credential history file parsing |
vault.go |
Windows Vault parsing |