Hack Forums
How to use CryptUnprotectData (win32) - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Malware and Viruses (https://hackforums.net/forumdisplay.php?fid=287)
+---- Thread: How to use CryptUnprotectData (win32) (/showthread.php?tid=6135902)



How to use CryptUnprotectData (win32) - lab232 - Jan 24, 2021

I've been trying to make a simple password grabber (for educational purposes) that decrypts the text in the login data file stored by chrome. I can't find any coherent documentation on how to use this, so can someone lend me a hand?


RE: How to use CryptUnprotectData (win32) - xoxallfather - Feb 7, 2021

It depends on what programming language you use. The "CryptUnprotectData" is a core windows API call. If you are using C you can easily import the particular lib (dpapi) that supports the codebase and start using it. You can easily find the MSDN documentation from Microsoft related to the function (just type "cryptunprotectdata msdn" in a browser).
Personally, I suggest using python cuse it is noob friendly and you can find example codes in Github.

Sorry, the forums don't let me post links atm cuse my account is new here.

Hope this will help you.


RE: How to use CryptUnprotectData (win32) - Pernat1y - Feb 8, 2021

MSDN is you friend
https://docs.microsoft.com/en-us/windows/win32/api/dpapi/nf-dpapi-cryptunprotectdata


RE: How to use CryptUnprotectData (win32) - Doomslayer - Feb 8, 2021

As others have said, rtfm