Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd Logo
Upload

Welcome to Scribd!

  • 164 views

    Synacktiv DPAPI Sthack

    Uploaded by

    Вячеслав Казанцев
    This document discusses exploiting DPAPI (Data Protection Application Programming Interface) during a pentest. DPAPI is used to protect secrets like passwords and certificates on Windows systems. The document provides background on DPAPI and how it works, outlines existing tools for decrypting DPAPI secrets, and describes a new technique the author developed to decrypt DPAPI secrets offline by extracting the necessary master keys from the user's profile and cracking them with John the Ripper or hashcat.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Synacktiv DPAPI Sthack

    Uploaded by

    Вячеслав Казанцев
    164 views17 pages
    This document discusses exploiting DPAPI (Data Protection Application Programming Interface) during a pentest. DPAPI is used to protect secrets like passwords and certificates on Windows systems. The document provides background on DPAPI and how it works, outlines existing tools for decrypting DPAPI secrets, and describes a new technique the author developed to decrypt DPAPI secrets offline by extracting the necessary master keys from the user's profile and cracking them with John the Ripper or hashcat.

    Original Title

    synacktiv_DPAPI_Sthack

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document discusses exploiting DPAPI (Data Protection Application Programming Interface) during a pentest. DPAPI is used to protect secrets like passwords and certificates on Windows systems. The document provides background on DPAPI and how it works, outlines existing tools for decrypting DPAPI secrets, and describes a new technique the author developed to decrypt DPAPI secrets offline by extracting the necessary master keys from the user's profile and cracking them with John the Ripper or hashcat.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    164 views17 pages

    Synacktiv DPAPI Sthack

    Uploaded by

    Вячеслав Казанцев
    This document discusses exploiting DPAPI (Data Protection Application Programming Interface) during a pentest. DPAPI is used to protect secrets like passwords and certificates on Windows systems. The document provides background on DPAPI and how it works, outlines existing tools for decrypting DPAPI secrets, and describes a new technique the author developed to decrypt DPAPI secrets offline by extracting the necessary master keys from the user's profile and cracking them with John the Ripper or hashcat.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 17

    DPAPI exploitation during pentest

    Présenté 07/04/2017
    Pour STHACK 2017 – rump session
    Par Jean-Christophe Delaunay
    whoami /groups
     Jean-Christophe Delaunay – @Fist0urs
     Jiss/Fist0urs on IRC
     Synacktiv – www.synacktiv.ninja

     Microsoft Windows Active Directory (kerberom)


     Passcracking – User and contributor to John The
    Ripper and hashcat (krb5tgs, axcrypt, keepass, etc.)

    2 / 17
    What is DPAPI – a bit of history

     Data Protection Application Programming Interface


     Helps protect secrets (passwords, certificates, etc.)
     Exists since Windows 2000!
     Evolved a lot but core is globally the same
     Invisible for the end-users

    3 / 17
    What is DPAPI – wtfbbq?
     Cryptography based on user’s password (not exactly in fact)
     Easy to implement for developpers:
     CryptProtectData

     CryptUnprotectData
     Widely used:
     Credential Manager, Windows Vault, IE, Wifi, Certificates,

    VPN, etc.
     Google Chrome, GTalk, Skype, Dropbox, iCloud, Safari,
    etc.

    4 / 17
    DPAPI Internals – developpers view

    5 / 17
    DPAPI Internals – crypto
     Secret based on user’s password…
     … but this is not secure enough, let’s use master
    keys, stored in undocumented blobs structures

    6 / 17
    DPAPI Internals – crypto

    7 / 17
    DPAPI Internals – overview

    8 / 17
    DPAPI Internals – masterkeys
    stored… ?

    In the user’s profile (%APPDATA


    %/Roaming/Microsoft)
     Protect/SID
     GUID1

     GUID2
     …
     Preferred

    9 / 17
    DPAPI – pentests

     2 possibilities:
     I can execute some code on the remote host

     I can’t...

    10 / 17
    DPAPI – existing tools

     Passcape: shareware + Windows only [1]


     impacket: does not decrypt DPAPI protected secrets
    directly [2]
     mimikatz: extracts secrets online and offline but
    Windows only [3]
     dpapick: extracts secrets offline! First tool published
    to manage DPAPI offline, incredible work! [4]
     dpapilab: an extension of dpapick [5]

    11 / 17
    DPAPI – pentests

     But wait, you told us that secrets are protected by


    user’s password?...
     ...and master keys are also protected by user’s
    password?
     …
     Profit!

    12 / 17
    DPAPI – pentests

    Fist0urs@jordy:~/sthack$ python DPAPImk2john.py S-1-5-21-


    XXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-1001 2dbd2e3b-XXXX-
    XXXX-XXXX-519c78c48397

    $DPAPImk$*2*local*S-1-5-21-XXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-
    1001*aes256*sha512*8000*1d52563XXXXXXXXXXXXXXXXXa0665d79*28
    8*0049e65595bbXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    XXXXXXX7e3b70539567d80afea5168d31c6ccd48b07b8328eb969295611c
    850f8cf25f06e7f9aede0f5fb4e

    13 / 17
    DPAPI – useful?

     Created in the roaming profile in an Active Directory


    environnment
     Alternative to MSCashvX if computer is hardened (no or
    only one cached logon hash)
     No need to inject in memory, all you need is a masterkey
    file from the filesystem and the user’s SID: much more
    reliable
     Hard to detect compared to existing attacks…
     Difficult to prevent this kind of attack :-/

    14 / 17
    DPAPI – roadmap

     Finish the implementation within John The Ripper


     Add the implementation within hashcat
     Some more things I keep for myself for the
    moment ;-)

    15 / 17
    ANY QUESTIONS?

    THANK YOU FOR YOUR


    ATTENTION
    Bibliography

     [1] https://www.passcape.com/
     [2] https://github.com/CoreSecurity/impacket
     [3] http://blog.gentilkiwi.com/mimikatz
     [4] http://dpapick.com/
     [5] https://github.com/dfirfpi/dpapilab

    17 / 17

    You might also like