Presentation
This is a forensic tool to deal, in an offline way, with Microsoft Windows® protected data, using the DPAPI (Data Protection API).
A non-exhaustive list of those recoverable secrets are :
- EFS certificates
- MSN Messenger credentials
- Internet Explorer form passwords
- Outlook passwords
- Google Talk credentials
- Google Chrome form passwords
- Wireless network keys (WEP key and WPA-PMK)
- Skype credentials
- …
