MichaelGrafnetter / DSInternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

zblurx / dploot

DPAPI looting in Python

crypt0p3g / dpapi-toolkit

Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI + web UI.