live dpapi vcred command

Jump to bottom

skelsec edited this page Apr 14, 2021 · 1 revision

What it does

Decrypts a VCRED file using the matching VPOL file and current user's context.

Remarks

None

Requirements

The VPOL file
The VCRED file

Subcommands

None

Switches

None

Examples

pypykatz live dpapi vcred VPOL VCRED: Decrypts the VCRED file.