Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking

A list of public attacks on BitLocker

A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.

Tools for decoding TPM SPI transaction and extracting the BitLocker key from them.

Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)

Configuration guidance for implementing BitLocker. #nsacyber

Managing BitLocker from WinPE Environment

Volatility plugin to extract BitLocker Full Volume Encryption Keys (FVEK)

Volatility plugin to retrieve the Full Volume Encryption Key in memory. The FVEK can then be used with the help of Dislocker to mount the volume.

Search datasets for Bitlocker recovery files and triage live systems for Bitlocker keys.

No description available

A highly simplistic attempt to brute-force lost bitlocker password!

Python script for carving Bitlocker VMK keys

This DSC module allows you to configure Bitlocker on a single disk, configure a TPM chip, or automatically enable Bitlocker on multiple disks.

Bitlocker manager for .Net Framework

Generates barcodes from BitLocker Recovery Keys and display it on screen

Extract VMK of BitLocker volume with TPMAndPIN protector and knowing PIN

These scripts provide a quick and easy way to create Bit Locker encrypted VHD (virtual hard disk) images using Batch or Power Shell. They (mostly) automate creating an encrypted "container" on a local or network drive to store sensitive information. The scripts prompt for the location, name, size, and password for the container (vhd file). "Shortcut" scripts to mount and unmount the container are generated automatically and placed on the user's desktop. These are geared toward end user workstation usage. The idea is very similar to the functionality previously provided by TrueCrypt (https://en.wikipedia.org/wiki/TrueCrypt).

Escrow Bitlocker Key to Crypt-Server

Utility to Windows BitLocker re-lock, unlock, decrypt, upgrade, backup etc.

Lock the entire hard drive except drive C and 6 folders Desktop, Documents, Downloads, Music, Picture, Video

Written by Andy Borer, a script to enable BitLocker on a Windows10 machine, back that key up to the BitLocker Recovery pane of Active Directory, and restart.

PowerShell scripts designed to manage BitLocker key backup to Azure Active Directory (AAD) using Microsoft Intune's "Remediations"feature.

Windows下u盘加密破解工具 bitlocker

Utility to aid cracking of BitLocker passwords. See JtR jumbo documentation for usage instructions. Use http://www.openwall.com/lists/john-users/ for support.

Query owned devices for BitlockerKey in AzureAD

Volatility 3 plugin for extracting BitLocker Full Volume Encryption Keys (FVEK)

No description available

Microsoft Bitlocker drive encryption attack.

Enable BitLocker through Powershell that backs up the recovery key under the properties tab in Active Directory for an On-Prem Environment - Written by Andy Borer