# MasterKeyBrute
Bruteforce DPAPI encrypted MasterKey File from Windows Credentials Manager
<div align="center">
<br>
<img src="https://img.shields.io/badge/Python-3.11-informational">
<br>
<a href="https://twitter.com/intent/follow?screen_name=ProcessusT" title="Follow"><img src="https://img.shields.io/twitter/follow/ProcessusT?label=ProcessusT&style=social"></a>
<br><br>
</div>
<br>
<div align="center">
<img src="https://github.com/ProcessusT/MasterKeyBrute/raw/main/.assets/demo.gif" width="80%;">
</div>
<br>
## Usage
<br>
MasterKeyBrute uses Impacket syntax :
<br><br>
```bash
**************************************************
MASTERKEYBRUTE
@Processus
v1.0
**************************************************
usage: masterkeybrute.py [-h] -mkf MKF -sid SID -w W [--blob BLOB] [--show-prekeys SHOW_PREKEYS] [-debug]
Bruteforce DPAPI encrypted MasterKey File from Windows Credentials Manager
options:
-h, --help show this help message and exit
-mkf MKF Master Key File
-sid SID User SID to derivate key
-w W Wordlist file
Optionnal:
--blob BLOB Blob file to decrypt with decrypted MasterKey
--show-prekeys SHOW_PREKEYS
Show calculated prekeys
Verbosity:
-debug Turn DEBUG output ON
```
<br>
<br>
## Example
<br>
```bash
python3 masterkeybrute.py -mkf d5a8f4c9-a8ab-423a-a027-601472215dff -sid S-1-5-21-2097421949-534903256-19675394-500 -w /opt/rockyou.txt --blob 5AEA058AA7D881EBF78E4BE4515E5159 -debug
```
<br>
<br>
Raw data
{
"_id": null,
"home_page": "https://github.com/ProcessusT/MasterKeyBrute",
"name": "masterkeybrute",
"maintainer": "Processus Thief",
"docs_url": null,
"requires_python": "<4.0,>=3.7",
"maintainer_email": "processus@thiefin.fr",
"keywords": "bruteforce, dpapi, windows, blob, masterkey, activedirectory, credentials",
"author": "Processus Thief",
"author_email": "processus@thiefin.fr",
"download_url": null,
"platform": null,
"description": "# MasterKeyBrute\n Bruteforce DPAPI encrypted MasterKey File from Windows Credentials Manager\n\n<div align=\"center\">\n <br>\n <img src=\"https://img.shields.io/badge/Python-3.11-informational\">\n <br>\n <a href=\"https://twitter.com/intent/follow?screen_name=ProcessusT\" title=\"Follow\"><img src=\"https://img.shields.io/twitter/follow/ProcessusT?label=ProcessusT&style=social\"></a>\n <br><br>\n</div>\n\n<br>\n<div align=\"center\">\n<img src=\"https://github.com/ProcessusT/MasterKeyBrute/raw/main/.assets/demo.gif\" width=\"80%;\">\n</div>\n<br>\n\n\n## Usage\n<br>\nMasterKeyBrute uses Impacket syntax :\n<br><br>\n\n```bash\n**************************************************\n MASTERKEYBRUTE\n\n @Processus\n v1.0\n**************************************************\n\n\nusage: masterkeybrute.py [-h] -mkf MKF -sid SID -w W [--blob BLOB] [--show-prekeys SHOW_PREKEYS] [-debug]\n\nBruteforce DPAPI encrypted MasterKey File from Windows Credentials Manager\n\noptions:\n -h, --help show this help message and exit\n -mkf MKF Master Key File\n -sid SID User SID to derivate key\n -w W Wordlist file\n\nOptionnal:\n --blob BLOB Blob file to decrypt with decrypted MasterKey\n --show-prekeys SHOW_PREKEYS\n Show calculated prekeys\n\nVerbosity:\n -debug Turn DEBUG output ON\n```\n\n<br>\n<br>\n\n## Example\n\n<br>\n\n```bash\npython3 masterkeybrute.py -mkf d5a8f4c9-a8ab-423a-a027-601472215dff -sid S-1-5-21-2097421949-534903256-19675394-500 -w /opt/rockyou.txt --blob 5AEA058AA7D881EBF78E4BE4515E5159 -debug\n```\n\n<br>\n<br>\n \n",
"bugtrack_url": null,
"license": "GPL-3.0-only",
"summary": "Bruteforce DPAPI encrypted MasterKey File from Windows Credentials Manager",
"version": "1.1",
"project_urls": {
"Bug Tracker": "https://github.com/ProcessusT/MasterKeyBrute/issues",
"Documentation": "https://github.com/ProcessusT/MasterKeyBrute",
"Homepage": "https://github.com/ProcessusT/MasterKeyBrute",
"Repository": "https://github.com/ProcessusT/MasterKeyBrute"
},
"split_keywords": [
"bruteforce",
" dpapi",
" windows",
" blob",
" masterkey",
" activedirectory",
" credentials"
],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "4e257d395fcffcb6116187852bb6d8f5b4c649697b6b9cc6d64a4a3f99b5541e",
"md5": "43615fa4b1255ded40157c3cd0e72a82",
"sha256": "c17ca8ae5e1e7f7d8f73031ac54c57f6c35c533a20e4e2040c51f7b8d42e6ec6"
},
"downloads": -1,
"filename": "masterkeybrute-1.1-py3-none-any.whl",
"has_sig": false,
"md5_digest": "43615fa4b1255ded40157c3cd0e72a82",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": "<4.0,>=3.7",
"size": 4546,
"upload_time": "2025-01-04T22:51:21",
"upload_time_iso_8601": "2025-01-04T22:51:21.172939Z",
"url": "https://files.pythonhosted.org/packages/4e/25/7d395fcffcb6116187852bb6d8f5b4c649697b6b9cc6d64a4a3f99b5541e/masterkeybrute-1.1-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2025-01-04 22:51:21",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "ProcessusT",
"github_project": "MasterKeyBrute",
"travis_ci": false,
"coveralls": false,
"github_actions": false,
"lcname": "masterkeybrute"
}
JSON
