Skip to content

Conversation

@Dramelac
Copy link
Member

Original PR on fortra/impacket: fortra#1917

As asked by the maintainers, I split the original PR fortra#1898 to only add regsecrets.py while this one is dedicated to dpapidump.py. This current PR CI will fail until the original PR is not merged due to code required.

Rest is copy pasted from fortra#1898 :

dpapidump.py:

This script is basically a copy of the SystemDPAPIdump.py from @clavoillotte in fortra#1137 that integrates the extraction of secrets from regsecrets.py while integrating other small modifications:

  • The collections of information related to SCCM in the WMI database has been enhanced to match those retrieved by sccmhunter.
  • Disable the retrieval of the credentials file related to virtualapp/didlogical, this credential has always the same file name and does not contain useful information security wise.
  • Various small bug fixes and code improvements.

@ShutdownRepo ShutdownRepo merged commit 4c62225 into ThePorgs:main Jul 17, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants