x3la.win
Published on

Windows PIN

Authors

First, extract the crypto Keys, Ngc , and User directories as well as the SECURITY and SYSTEM hives from the given file system.

File System

Download the following two python scripts from this repo.

Scripts

Run the ngcparse.py file to get the PIN GUIDs. Supply the required options to the ngccryptokeysdec.py file (either pinbrute or pinexport depending on what is required;

  • pinbrute - brute forces the pin and
  • pinexport - exports the PIN as a hashcat hash with mode 28100)

This successfully returns the required PIN:

Scripts