This means, given a domain DPAPI backup key, an attacker can decrypt masterkeys for any domain user that can then be used to decrypt any Vault/Credentials/Chrome Logins/other DPAPI blobs/etc. The key ...
First of all, thanks for the tool. I am trying to use it to decrypt a SID-protected PFX. Here is the command I am trying to use: import dpapi_ng dpapi_ng_blob = ...