Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

Directory Services Internals (DSInternals) PowerShell Module and Framework

FUSE driver to read/write Windows' BitLocker-ed volumes under Linux / Mac OSX

macOS: mount any linux-supported filesystem read/write using NFS and a microVM

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking

A list of public attacks on BitLocker

A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.

Tools for decoding TPM SPI transaction and extracting the BitLocker key from them.

App Engine-based escrow solution for enterprise management of disk encryption technologies for OS X (FileVault 2), Windows (BitLocker), and Linux (LUKS).

Framework to join Linux's physical security bricks.

Access Manager provides web-based access to local admin (LAPS) passwords, BitLocker recovery keys, and just-in-time administrative access to Windows computers in a modern, secure, and user-friendly way.

Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes

Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)

This tool can decrypt a BitLocker-locked partition with the TPM vulnerability

Cryptsetup backup upstream repository https://gitlab.com/cryptsetup/cryptsetup

bitpixie Proof of Concept - Bitlocker Decryptor

Configuration guidance for implementing BitLocker. #nsacyber

Windows 10/11 VM on Linux (QEMU/libvirt/KVM) with Secure Boot, BitLocker, and good performance

Bitpixie exploitation PoC

Managing BitLocker from WinPE Environment

Volatility plugin to extract BitLocker Full Volume Encryption Keys (FVEK)

Volatility plugin to retrieve the Full Volume Encryption Key in memory. The FVEK can then be used with the help of Dislocker to mount the volume.

Search datasets for Bitlocker recovery files and triage live systems for Bitlocker keys.

Decrypt the bitlocker FVEK for a bitlocker encrypted drive.

Powershell script collection by Fabian Niesen InfrastrukturHelden.de. The following applies to all scripts: Use at your own risk and without any guarantee! The scripts that have a header with versioning are usually more mature. Others are sometimes just practical code snippets that I can access better this way.

No description available

A highly simplistic attempt to brute-force lost bitlocker password!

Python script for carving Bitlocker VMK keys