dfirfpi/decwindbx

A sort of a toolkit to decrypt Dropbox Windows DBX files

decwindbx's Issues

struct.error: unpack_from requires a buffer of at least 16 bytes

Was trying this code, and ran on this issue : (I changed the key name to Client-p) as this seems to be the new value;

  File "dbx-key-win-dpapi.py", line 101, in <module>
    r.open('Software\\Dropbox\\'+key_name).value('Client-p').value())
  File "/usr/lib/python2.7/site-packages/DPAPI/probe.py", line 38, in __init__
    eater.DataStruct.__init__(self, raw)
  File "/usr/lib/python2.7/site-packages/DPAPI/Core/eater.py", line 128, in __init__
    self.parse(Eater(raw, endianness="<"))
  File "/usr/lib/python2.7/site-packages/DPAPI/Probes/dropbox.py", line 56, in parse
    self.dpapiblob = blob.DPAPIBlob(data.eat_string(dpapi_len))
  File "/usr/lib/python2.7/site-packages/DPAPI/Core/blob.py", line 52, in __init__
    eater.DataStruct.__init__(self, raw)
  File "/usr/lib/python2.7/site-packages/DPAPI/Core/eater.py", line 128, in __init__
    self.parse(Eater(raw, endianness="<"))
  File "/usr/lib/python2.7/site-packages/DPAPI/Core/blob.py", line 63, in parse
    self.provider = "%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x" % data.eat("L2H8B")
  File "/usr/lib/python2.7/site-packages/DPAPI/Core/eater.py", line 70, in eat
    v = struct.unpack_from(fmt, self.raw, self.ofs)
struct.error: unpack_from requires a buffer of at least 16 bytes```