dpapi vcred command

Jump to bottom

skelsec edited this page Apr 13, 2021 · 1 revision

What it does

Decrypts a VCRED file using the decryption keys obtained by decrypting the matching VPOL file.

Remarks

None

Requirements

the keys obtained by decrypting the matching VPOL file
The VCRED file

Subcommands

None

Switches

--vpolkey : The key obtained by decrypting the matching VPOL file.

Examples

pypykatz dpapi vcred --vpolkey AAAA VCRED_FILE: Decrypts the VCRED file with the supplied VPOL key.