Record · corpus.blog/posts/01a0c539-97e4-713b-a7a5-b673aa8080e9

Discovering the secrets of a pageant minidump

diablohorn.com · published 4 September 2015

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at diablohorn.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 32
Words captured: 4,330

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://en.wikipedia.org/wiki/Red_team

en.wikipedia.org

http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html

chiark.greenend.org.uk

https://technet.microsoft.com/en-au/sysinternals/dd996900.aspx

technet.microsoft.com

https://github.com/NetSPI/sshkey-grab/blob/master/parse_mem.py

github.com

http://www.woodmann.com/collaborative/tools/index.php/SSL_Key/Cert_Finder

woodmann.com

https://msdn.microsoft.com/en-us/library/windows/desktop/ms679293(v=vs.85

msdn.microsoft.com

http://moyix.blogspot.com.au/2008/05/parsing-windows-minidumps.html

moyix.blogspot.com.au

https://twitter.com/moyix

twitter.com

http://amnesia.gtisc.gatech.edu/~moyix/minidump.py

amnesia.gtisc.gatech.edu

https://gregsplaceontheweb.wordpress.com/2014/05/30/minidump-explorer-v0-2-reading-minidump-memoryliststream-and-memory64liststream/

gregsplaceontheweb.wordpress.com

https://minidumps.codeplex.com

minidumps.codeplex.com

http://the.earth.li/~sgtatham/putty/latest/putty-src.zip

the.earth.li

http://tartarus.org/~simon-git/gitweb/?p=putty.git;a=summary

tartarus.org

https://en.wikipedia.org/wiki/2–3–4_tree

en.wikipedia.org

https://msdn.microsoft.com/en-au/library/ms809762.aspx

msdn.microsoft.com

https://en.wikipedia.org/wiki/Address_space_layout_randomization

en.wikipedia.org

https://msdn.microsoft.com/en-us/library/windows/hardware/ff551063(v=vs.85

msdn.microsoft.com

http://www.ollydbg.de

ollydbg.de

http://blog.oddbit.com/2011/05/08/converting-openssh-public-keys/

blog.oddbit.com

https://en.wikipedia.org/wiki/Abstract_Syntax_Notation_One

en.wikipedia.org

http://lapo.it/asn1js/

lapo.it

https://www.dlitz.net/software/pycrypto/

dlitz.net

https://github.com/gentilkiwi/mimikatz

github.com

https://diablohorn.wordpress.com/2015/10/03/pageant-key-extraction-automated/

diablohorn.wordpress.com

http://trapkit.de/research/sslkeyfinder/keyfinder_v1.0_20060205.pdf

trapkit.de

https://www.thc.org/releases/keyfinder.c

thc.org

https://hacking.ventures/rsa-keys-in-heartbleed-memory/

hacking.ventures

https://martin.kleppmann.com/2013/05/24/improving-security-of-ssh-private-keys.html

martin.kleppmann.com

http://crypto.stackexchange.com/questions/1729/why-does-the-pkcs1-rsa-private-key-structure-contain-more-than-just-exponent-and

crypto.stackexchange.com

http://mcarpenter.org/blog/2013/10/22/extracting-openssl-private-keys-from-core-dumps

mcarpenter.org

http://luca.ntop.org/Teaching/Appunti/asn1.html

luca.ntop.org

https://www.dlitz.net/software/pycrypto/api/current/

dlitz.net

Elsewhere on diablohorn.com (10)

https://diablohorn.com/wp-content/uploads/2015/09/mde_main_window.png

diablohorn.com

https://diablohorn.com/wp-content/uploads/2015/09/static_ssh_tree.png

diablohorn.com

https://diablohorn.com/wp-content/uploads/2015/09/mem_start_tree.png

diablohorn.com

https://diablohorn.com/wp-content/uploads/2015/09/mem_tree.png

diablohorn.com

https://diablohorn.com/wp-content/uploads/2015/09/mem_tree_node.png

diablohorn.com

https://diablohorn.com/wp-content/uploads/2015/09/mem_tree_element.png

diablohorn.com

https://diablohorn.com/wp-content/uploads/2015/09/key_comment.png

diablohorn.com

https://diablohorn.com/wp-content/uploads/2015/09/key_data.png

diablohorn.com

https://diablohorn.com/wp-content/uploads/2015/09/key_bignum2.png

diablohorn.com

https://diablohorn.com/wp-content/uploads/2015/09/key_compare.png

diablohorn.com