You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: documentation/modules/post/windows/gather/bitlocker_fvek.md
+8-11Lines changed: 8 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
## Vulnerable Application
2
2
3
-
This module enumerates ways to decrypt Bitlocker volume and if a recovery key is stored locally or can be generated, dump the Bitlocker master key (FVEK)
3
+
This module enumerates ways to decrypt a Bitlocker volume and if a recovery key is stored locally or can be generated, dump the Bitlocker master key (FVEK)
4
4
5
5
## Verification Steps
6
6
1. Start msfconsole
@@ -12,24 +12,21 @@ This module enumerates ways to decrypt Bitlocker volume and if a recovery key is
12
12
13
13
## Options
14
14
15
-
***
16
-
DRIVE_LETTER
17
-
***
15
+
**DRIVE_LETTER**
16
+
18
17
Dump information from the DRIVE_LETTER encrypted with Bitlocker.
19
18
20
-
***
21
-
RECOVERY_KEY
22
-
***
19
+
**RECOVERY_KEY**
20
+
23
21
Use the recovery key provided to decrypt the Bitlocker master key (FVEK).
24
22
25
-
***
26
-
SESSION
27
-
***
23
+
**SESSION**
24
+
28
25
The session to run this module on.
29
26
30
27
## Scenarios
31
28
32
-
### A run on Windows 7 (6.1 Build 7601, Service Pack 1).
29
+
### Windows 7 (6.1 Build 7601, Service Pack 1).
33
30
34
31
```
35
32
[*] Meterpreter session 1 opened (192.168.1.3:4444 -> 192.168.1.6:49184) at 2019-12-11 12:51:59 -0700
0 commit comments