capi
crypto::capi patches CryptoAPI layer for easy export (Experimental
โš 
).
This patch modifies a CryptoAPI function, in the mimikatz process, in order to make unexportable keys, exportable (no specific right other than access to the private key is needed). It can be used with crypto::certificates and crypto::keys. This is only useful when the keys provider is one of:
  • Microsoft Base Cryptographic Provider v1.0
  • Microsoft Enhanced Cryptographic Provider v1.0
  • Microsoft Enhanced RSA and AES Cryptographic Provider
  • Microsoft RSA SChannel Cryptographic Provider
  • Microsoft Strong Cryptographic Provider
1
mimikatz # crypto::capi
2
Local CryptoAPI patched
Copied!
Last modified 6mo ago
Copy link