Red Team Story: Offline SCCM backup secrets decryption

No ratings

Presented at Hack.lu 2025 by

A brief red-team story that takes you on a short journey into SCCM backup-secret decryption. This lightning talk demonstrates a complete offline method to decrypt SCCM backup secrets, lists the exact artefacts required for decryption, and provides a supporting script to reproduce the workflow for your future red team assessments.