https://cybertoolchain.io/tools/dploot New releases and features in dploot, tracked by The Cyber Toolchain. en Fri, 04 Apr 2025 13:23:08 GMT https://github.com/zblurx/dploot/releases/tag/3.1.2 https://github.com/zblurx/dploot/releases/tag/3.1.2 Fri, 04 Apr 2025 13:23:08 GMT dploot 3.1.2 adds bypass for STATUS_SHARING_VIOLATION errors during DPAPI looting. • Bypasses STATUS_SHARING_VIOLATION errors, enabling DPAPI data collection from files locked by other processes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dploot https://github.com/zblurx/dploot/releases/tag/3.0.0 https://github.com/zblurx/dploot/releases/tag/3.0.0 Wed, 31 Jul 2024 13:49:33 GMT dploot 3.0.0 adds local triage, Token Broker Cache looting, DPAPI blob decryption, and hashcat/JtR-compatible masterkey hash dumping. • Adds local triage mode for running dploot directly on the target machine without remote credentials. • New `wam` action loots Token Broker Cache (Windows Authentication Manager) tokens. • New `blob` action decrypts arbitrary DPAPI blobs directly from the command line. • Dumps DPAPI masterkey hashes in a format compatible with hashcat and John the Ripper for offline cracking. • Enhances MobaXterm and browser looting with options to kill processes or bypass shared-file violations. • Adds callback function support for integrating dploot loot into external toolchains. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dploot https://github.com/zblurx/dploot/releases/tag/2.6.0 https://github.com/zblurx/dploot/releases/tag/2.6.0 Fri, 08 Mar 2024 08:37:06 GMT dploot 2.6.0 adds SCCM secrets extraction capability alongside internal refactoring. • Adds SCCM secrets extraction to the dploot tool Full history on Cyber Toolchain: https://cybertoolchain.io/tools/dploot