#text #file

bin+lib lpass-blob

Check your LastPass blob for AES-ECB encryption

1 unstable release

0.1.0 Jan 5, 2023

#746 in #text

WTFPL license

5KB
80 lines

LastPass Blob Deobfuscator

A tool to deobfuscate your LastPass blob and determine if any passwords are encrypted with AES-ECB and therefore more vulnerable with the recent breach.

Usage

cargo install lpass-blob
# Grab your blob: https://www.grc.com/sn/SN-904-Notes.pdf
# Copy & paste it to a text file
lpass-blob [path to the text file]

Created because of Steve Gibson's call-to-action on the Security Now! Podcast. I don't use LastPass, but made an account for testing.

If you find any bugs, please report via Github issues.


lib.rs:

LastPass Blob Deobfuscator

A tool to deobfuscate your LastPass blob and determine how vulnerable you are with the recent breach.

Created because of Steve's call-to-action on the Security Now! Podcast

Dependencies

~3–5MB
~89K SLoC