pkg dpapi

pkg/dpapi - DPAPI Decryption

Parse and decrypt Windows Data Protection API blobs, master keys, credential files, and vaults.

Types

Type	Description
DPAPIBlob	Encrypted DPAPI blob structure
MasterKey	DPAPI master key
Credential	Decrypted Windows credential
CredentialFile	DPAPI credential file

Key Files

File	Description
dpapi.go	DPAPI blob structure and AES/3DES decryption
backupkey.go	Domain DPAPI backup key extraction (via BKRP RPC)
credhist.go	Credential history file parsing
vault.go	Windows Vault parsing