Skip to content

Crashes on Windows 11 #33

@init5-SF

Description

@init5-SF

hi, just grabbed the latest version and compiled it (release, not debug)
I get the below error on Windows 11 (23H2)

image

Text error:

C:\tools\SharpDPAPI\SharpDPAPI\bin\Release>whoami
nt authority\system

C:\tools\SharpDPAPI\SharpDPAPI\bin\Release>SharpDPAPI.exe machinetriage

  __                 _   _       _ ___
 (_  |_   _. ._ ._  | \ |_) /\  |_) |
 __) | | (_| |  |_) |_/ |  /--\ |  _|_
                |
  v1.11.3


[*] Action: Machine DPAPI Credential, Vault, and Certificate Triage


[!] Unhandled SharpDPAPI exception:

System.Security.Cryptography.CryptographicException: The cipher mode specified requires that an initialization vector (IV) be used.
   at System.Security.Cryptography.CapiSymmetricAlgorithm.ProcessIV(Byte[] iv, Int32 blockSize, CipherMode cipherMode)
   at System.Security.Cryptography.CapiSymmetricAlgorithm..ctor(Int32 blockSize, Int32 feedbackSize, SafeCspHandle provider, SafeCapiKeyHandle key, Byte[] iv, CipherMode cipherMode, PaddingMode paddingMode, EncryptionMode encryptionMode)
   at System.Security.Cryptography.AesCryptoServiceProvider.CreateDecryptor(SafeCapiKeyHandle key, Byte[] iv)
   at SharpDPAPI.Crypto.LSAAESDecrypt(Byte[] key, Byte[] data)
   at SharpDPAPI.LSADump.GetLSAKey()
   at SharpDPAPI.LSADump.GetLSASecret(String secretName)
   at SharpDPAPI.LSADump.GetDPAPIKeys(Boolean show)
   at SharpDPAPI.Triage.TriageSystemMasterKeys(Boolean show)
   at SharpDPAPI.Commands.Machinetriage.Execute(Dictionary`2 arguments)
   at SharpDPAPI.Domain.CommandCollection.ExecuteCommand(String commandName, Dictionary`2 arguments)
   at SharpDPAPI.Program.MainExecute(String commandName, Dictionary`2 parsedArgs)


SharpDPAPI completed in 00:00:00.0240340

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions