Gauntlith

All versions

abusing-dpapi-for-credential-access 54a798831d22

Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys) online or offline using SharpDPAPI, SharpChrome, Mimikatz, or Impacket's dpapi.py, including domain-wide decryption via the DPAPI backup key. Use during authorized red-t…

Launcher coming soon

Issues found. At least one check flagged something in this version. It isn't confirmed harmful. Read the source first if you can.

Without the launcher
git clone https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
cd Anthropic-Cybersecurity-Skills
git checkout 54a798831d2266a3ca61ce68a7acb80b81160d57

Then copy Anthropic-Cybersecurity-Skills/skills/abusing-dpapi-for-credential-access into your app's skills folder, for example .claude/skills/abusing-dpapi-for-credential-access.

Issues found54a798831d22 · 54a7988 · pinned 12 Nov 2026
Permanent link

Commit

54a798831d2266a3ca61ce68a7acb80b81160d57Source at 54a7988

Works with

Claude Code, SKILL.md

Checks

  • Instructions read in full
  • Static code checks
  • Copy check

Not checked: Sandbox run: not built yet

At least one check flagged something. Not confirmed harmful. Installing asks you to confirm.

Files

PathSizeGit blobSHA-256
skills/abusing-dpapi-for-credential-access/LICENSE11.0 KBd8851182d0218e298f8b852802581c545c60b897a941b58ef0ba43a31e24ae7ece1b743a585efed9e37792b9ca063e0798be1cbe
skills/abusing-dpapi-for-credential-access/SKILL.md10.4 KB59bc06c5b9c88c4cde2a0445ba778bb8511aaca3e62c6659059f8cdbd2e204597b4e762d860bb579a1ba6e5946c3042bfb24d44a
skills/abusing-dpapi-for-credential-access/references/api-reference.md3.3 KB1221b48174704c0d05b4fcad16b3398a2fb6d09940914c529a8877aa397db6e0e6fb43a0c08beb5ff13a4a8502510ef8de7e2e72
skills/abusing-dpapi-for-credential-access/references/standards.md1.8 KB4d25756e0b40903a2167af8a9dfc8072a05ad7dcd2d181bde16ae874f0504c9728bdb47a959681a511b5d3eb4d003da460c75a34
skills/abusing-dpapi-for-credential-access/scripts/agent.py6.1 KB30be50fbfb85459409860af3b1bde2b52dc9ee2a2d51dbd9500277b33a383ec5f8d057508220555781e6e19c134a4dffb3a47bbb