aguinet / wannakey

Wannacry in-memory key recovery
GNU General Public License v3.0
1.06k stars 150 forks source link

Windows versions with supported Crypto API #5

Open aguinet opened 7 years ago

aguinet commented 7 years ago

Please paste here the results of winapi_check!

aguinet commented 7 years ago

Windows 10.0.10240 (Win10 or Server 2016) / Intel 64-bit / Leaks

polymorf commented 7 years ago

Windows 6.1.7601 (Win7 or Server 2008R2) / Intel 64-bit / Leaks

Juliy-Khimiy commented 7 years ago

Please help me. I did not understand how to decrypt the files. Please write sequentially step by step, how to do it

OothecaPickle commented 7 years ago

@Juliy-Khimiy https://github.com/aguinet/wannakey#usage (READ THE SCREEN :))

Juliy-Khimiy commented 7 years ago

Oh thank you. But this description is not understand for me.

bothie commented 7 years ago

Step 1 (optional): Download https://github.com/aguinet/wannakey/blob/master/bin/winapi_check.exe and run it to check, whether you have a chance at all. If no, you're lost. If yes, go to step 2. Step 2: Download https://github.com/aguinet/wannakey/blob/master/bin/wannakey.exe , run it and hope for the best.

bohelax commented 7 years ago

Windows 5.1.2600 (XP 32-bit) / Intel 32-bit / Leaks

logendrae commented 7 years ago

Windows 6.1.7601 (Win7 or Server 2008R2) / Intel 64-bit / Leaks

logendrae commented 7 years ago

Windows 6.1.7601 (Win7 or Server 2008R2) / Intel 64-bit / Leaks

unable to get working directory of the encrypting process!

Juliy-Khimiy commented 7 years ago

Thank you

aguinet commented 7 years ago

Well, are you actually infected by WannaCry? Because the whole point of wannakey/wanakiwi is to recover the private key used by a computer infected by WannaCry....

singleghost commented 7 years ago

Windows 10.0.14393 (Win10 or Server 2016) / Intel 64-bit / Leaks

JohnnyLChang commented 7 years ago

Windows 10.0.15063 (Win10 or Server 2016) / Intel 64-bit / Leaks

phucnguyenv commented 7 years ago

Windows 10.0.14393 (Win10 or Server 2016) / Intel 64-bit / No leak

okyanusoz commented 4 years ago

Windows 6.1.7601 (Win7 or Server 2008R2) / Intel 64-bit / Leaks