Monthly Archives: June 2016

Export certificates marked as not exportable in the Windows certificate manager

So, you need the private key for a certificate on Windows, for some innocent snooping around with Wireshark, but someone marked it as not exportable. Now what? Cue Gentil Kiwi and his tool Mimikatz. The following commands will extract the certificates from the local store: crypto::capi crypto::certificates /systemstore=CERT_SYSTEM_STORE_LOCAL_MACHINE /export The password for the pfx files […]