dpapi

Dumping DPAPI credz remotely

DPAPI looting in Python

Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.

Bruteforce DPAPI encrypted MasterKey File from Windows Credentials Manager

Python application to scan user's installed browsers for secrets such as stored passwords and cookies.

Advanced Discord token recovery framework for Windows. Extracts tokens from 20+ Chromium browsers, Firefox, and Discord clients via AES-GCM/DPAPI decryption. Features parallel validation, webhook delivery with fallback, stealth mode, custom EXE icon builds, and full JSON configuration.

A Windows-based Decryption&Extraction with review tool for WhatsApp Desktop that decrypts SQLite/WAL files, processes WebView2 IndexedDB, and merges evidence into a unified database for analysis.

Information stored in applications is decrypted using DPAPI. In this way, attacker passwords may be captured. For use in attack scenarios, two applications written in Python language have been developed that steal the information stored in internet browsers: 1-Browser Stealer, 2-Browser Stealer Report

延安大学Dr.COM/ePortal校园网自动登录工具，支持Windows托盘后台运行、DPAPI加密配置与断线重连。

User-level Windows application locker with PIN protection, system tray, per-user autostart, diagnostics, and owner-only Telegram controls.

Offline analysis and decryption of SSIS artifacts.

Sincronização de pastas no Windows, com interface gráfica e modo silencioso para agendamento. 3 modos (espelho, incremental, bidirecional) e 13 destinos: local, rede, FTP/FTPS, SFTP, WebDAV, S3, Backblaze B2, Azure, Google Cloud, Dropbox, OneDrive e Google Drive.

四川农业大学校园网（i_sicau_wifi6）自动认证守护程序：托盘常驻、掉线自愈自动重连、DPAPI 加密保存凭据

Windows Weixin 4.x Chatlog stack with masked data-key extraction, reproducible builds, DPAPI storage, media resolution, and voice transcription

Windows 本地企业邮箱批量发送桌面工具：任务包驱动、Markdown 正文、附件、IMAP 草稿箱、托盘定时发送、DPAPI 加密授权码

OpenAI account manager for VSCode extensions (Kilocode, Roo-Cline) - backup, restore and switch OAuth tokens in state.vscdb

Local Windows desktop app + MCP bridge that lets Claude Code/Codex safely assist with Gmail - read, cleanup plans, drafts, and RFC 8058 one-click unsubscribe - every destructive action is human-gated in the GUI. v0.1 developer preview, source-available.

Windows desktop app (Python + PySide6) that automates scheduled CSV exports from OCS Inventory NG, with encrypted credentials, automatic cleanup, and autostart after reboot.