frida_win_crypto_hook
Hooks Windows CryptoAPI and BCrypt encryption/decryption functions. Logs key handle, data sizes, and operation type for a specified process.
Instructions
[Windows] Hook CryptoAPI and BCrypt encryption/decryption.
Hooks CryptEncrypt, CryptDecrypt (advapi32), BCryptEncrypt, BCryptDecrypt (bcrypt.dll). Logs key handle, data sizes, and operation type.
target: process name or pid (string).
duration_seconds: how long to capture (default 10).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | ||
| duration_seconds | No |