gentilkiwi / mimikatz

A little tool to play with Windows security

Home Page:http://blog.gentilkiwi.com/mimikatz

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Cert extraction feature is overengineered

0xdavidel opened this issue · comments

commented

The extraction is extremely cool, but here is a nicer way to do it:
Take a look at https://docs.microsoft.com/en-us/windows/win32/api/cryptuiapi/nf-cryptuiapi-cryptuiwizexport
In combination of the tricks done in https://github.com/iSECPartners/jailbreak

My Flatmate had a PTSD flashback reading through kuhl_m_crypto_extractor.c

  1. the question is not to be nice, but usable... this UI is not compatible with a lots of use case.
  2. extractor functions are not related to Certificate with private key export