rsakeyfind

locates BER-encoded RSA private keys in memory images

Install

All systems
curl cmd.cat/rsakeyfind.sh
Debian Debian
apt-get install rsakeyfind
Ubuntu
apt-get install rsakeyfind
image/svg+xml Kali Linux
apt-get install rsakeyfind
Windows (WSL2)
sudo apt-get update sudo apt-get install rsakeyfind
Raspbian
apt-get install rsakeyfind

rsakeyfind

locates BER-encoded RSA private keys in memory images

rsakeyfind is a tool that locates BER-encoded RSA private keys in MEMORY-IMAGE. If a MODULUS-FILE is specified, it will locate private and public keys matching the hex-encoded modulus read from this file. This package is useful to several activities, as forensics investigations.