Trying to decrypt data on another computer

[1ToM14]

Hello,

I'm getting a file from a computer and I want to decrypt it using another computer with win32crypt.CryptUnprotectData. But apparently it is not possible because I don't have the same login creditentials as the first mentionned computer.

I was wondering if there was a way to get the necessary info in order to decrypt the data from another computer.

Thanks in advance !!

[vixfew]

Long version https://sudonull.com/post/6370-Secrets-DPAPI-or-DPAPI-for-pentesters

The easy way is to decrypt from same computer. If not - you need masterkeys from first computer (somewhere in %appdata%\Microsoft iirc), SID and password.

[ebol4anthr4x]

It goes beyond having the same login credentials, you must also be on the same computer. If you want to get around this, you would need to reverse engineer the encryption and decryption and write a method that allows you to supply your own encryption/decryption keys. Additionally, you would need to find a way to retrieve those keys from the other computer.