LSASecretsDump

LSASecretsDump was designed as a command-line tool capable of extracting LSA-related information from the registry, in order to decrypt it and find out passwords, whether they are RAS/VPN or Autologin keys, or other types of system-related passwords.

Unfortunately, the software application is not compatible with the newest Windows version. However, it still works with older editions of Windows: 2000, XP, 2003, 2008, Vista and 7. Windows 98 and ME, along with Windows 8 and newer aren't supported.

Because it's a console-based application, LSASecretsDump can only be used from a command prompt window. Using the "external <Windows Directory>" command, it's possible to dump the LSA data from an external instance of a Windows installation. You can also include any empty items in the dump by adding the "-empty" command. The location responsible with the LSA-related information is located at HKEY_LOCAL_MACHINE\Security\Policy\Secrets in the system registry.

Because it means handling registry data, it's necessary to launch the command prompt window with administrative privileges to be able to successfully use LSASecretsDump, without encountering any permission errors. The application is free to use for both personal and commercial purposes. Installation is not necessary, so you can run the app on any PC from a USB flash drive, without any previous setup.