Locked ExtractBitlockerKeys v1.1

[dEEpEst]

A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.

Features

•  Automatically gets the list of all computers from the domain controller's LDAP.
•  Multithreaded connections to extract Bitlocker keys from LDAP.
•  Iterate on LDAP result pages to get every computer of the domain, no matter the size.

⚠️ Please do not store this backup in an online SMB share of the domain. You should prefer to print it and store it physically in a locked safe.

 

•  Export results in JSON with Computer FQDN, Domain, Recovery Key, Volume GUID, Created At and Organizational Units.
•  Export results in XLSX with Computer FQDN, Domain, Recovery Key, Volume GUID, Created At and Organizational Units.
•  Export results in SQLITE3 with Computer FQDN, Domain, Recovery Key, Volume GUID, Created At and Organizational Units.

 

 

Demonstration from Linux in Python

To extract Bitlocker recovery keys from all the computers of the domain domain.local you can use this command:

This is the hidden content, please

• Sign In
• or
• Sign Up

You will get the following output:

This is the hidden content, please

• Sign In
• or
• Sign Up

/applications/core/interface/js/spacer.png">

 

 

Demonstration from Windows in Powershell

To extract Bitlocker recovery keys from all the computers of the domain domain.local you can use this command:

This is the hidden content, please

• Sign In
• or
• Sign Up

You will get the following output:

This is the hidden content, please

• Sign In
• or
• Sign Up

/applications/core/interface/js/spacer.png">

 

 

Usage

This is the hidden content, please

• Sign In
• or
• Sign Up

 

 

Download

This is the hidden content, please

• Sign In
• or
• Sign Up