Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Dumpkeychain

Dumpkeychain is a Windows command-line utility for decrypting credentials from Mac OS X system and user keychains given the associated system-key-file or keychain-password respectively. Mac OS X user keychains often contain many Internet account passwords login credentials and secure notes. The system keychain contains Wi-Fi passwords and other shared credentials.

The application has been tested/developed under Windows 7 using keychain data from Mac OS X 10.8 Mountain Lion and the developers' preview of Mac OS X 10.9 Mavericks. Output is to a user-nominated text file. This version of the application fixes a bug when parsing keychain-tables containing unused record-pointers. It also adds the ability to output the created and last-modified timestamps for each record that has them.

Download Now



Version: 3.1
Tested with:
EnCase Forensic 7.07
Developer: Simon Key
Category: Utility

9670 DOWNLOADS

YOU MAY ALSO LIKE

Utility

SQLite Blob Extractor

This script is designed to extract BLOB-data from SQLite database files.
By Simon Key
234 Downloads
App
Utility

View SQLite With WAL Plugin

Allows SQLite database files to be opened in conjunction with any write-ahead log (WAL) file.
By Simon Key
140 Downloads
App
Utility

Volatility Plugin

This EnScript is designed to facilitate easier use of Volatility in EnCase. It can be configured for any number of Volatility plugins and supports multithreading.
By Simon Key
98 Downloads
App
Utility

Registry Viewer Plugin

This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
By Simon Key
72 Downloads
App