Skill UI

This skill details how to abuse the Windows DPAPI (Data Protection API) to extract and decrypt sensitive secrets protected by the OS. It covers multiple scenarios: online decryption (using the target user's context), offline decryption (requiring passwords or NTLM hashes), and advanced domain-wide decryption via the DPAPI backup key. Essential for red-teaming and post-exploitation activities to harvest credentials, browser logins, and Wi-Fi passwords.

A specialized downstream skill designed for solving encrypted ZIP/PKZIP challenges, particularly those using the legacy ZipCrypto method in CTF competitions. This workflow utilizes known-plaintext attacks (via tools like bkcrack) to recover internal encryption keys, enabling decryption and extraction without resorting to brute-force password guessing. Use this when a predictable plaintext fixture is available.

Manage cryptographic keys using Azure Key Vault Keys SDK for TypeScript. Supports creating, encrypting, decrypting, signing, and rotating keys. Includes operations for secrets, key management, and cryptographic functions like encryption, decryption, signing, and verification. Essential for secure cloud application development with Azure.

Manage application secrets and cryptographic keys using Azure Key Vault SDK for TypeScript. Supports operations like create, retrieve, rotate, and delete secrets and keys. Includes encryption, decryption, signing, and verification capabilities. Essential for secure backend development and cloud infrastructure management in Azure environments.

This .NET SDK enables secure management of cryptographic keys within Azure Key Vault and Managed HSM. It supports key lifecycle operations including creation, rotation, encryption, decryption, signing, and verification. Developers can authenticate via DefaultAzureCredential or Service Principal to perform cryptographic operations like encrypt, decrypt, sign, and verify data securely in cloud environments.

This Java SDK enables secure cryptographic key management within Azure Key Vault and Managed HSM. It supports creating, managing, and using RSA, EC, and symmetric keys. Users can perform encryption, decryption, signing, and verification operations. The library facilitates key lifecycle management including creation, retrieval, updates, deletion, and recovery, ensuring robust security practices for cloud applications.