> For the complete documentation index, see [llms.txt](https://breakpoint-journal.gitbook.io/breakpoint/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://breakpoint-journal.gitbook.io/breakpoint/windows/windows-privilege-escalation/dpapi.md).

# DPAPI

> DPAPI provides an easy set of APIs to easily encrypt ([CryptProtectData()](https://docs.microsoft.com/en-us/windows/desktop/api/dpapi/nf-dpapi-cryptprotectdata)) and decrypt ([CryptUnprotectData()](https://docs.microsoft.com/en-us/windows/desktop/api/dpapi/nf-dpapi-cryptunprotectdata)) opaque data “blobs” using implicit crypto keys tied to the specific user or system. This allows applications to protect user data without having to worry about things like key management.

DPAPI 

## SharpDPAPI

* <https://github.com/GhostPack/SharpDPAPI?tab=readme-ov-file>

A tool for pillaging DPAPI backup keys and other sensitive DPAPI information. This is a port of mimikatz's DPAPI module.&#x20;

## Resources

* [ ] [Operational Guidance for Offensive User DPAPI Abuse](https://blog.harmj0y.net/redteaming/operational-guidance-for-offensive-user-dpapi-abuse/)