Iperius Backup Security Vulnerability Summary Vulnerability Overview This repository discloses two critical cryptographic vulnerabilities in Iperius Backup: Attack Impact: Enables offline credential recovery and local privilege escalation to --- Affected Scope Affected Versions: Iperius Backup v8.7.2 (Windows) and earlier Fixed Version: Iperius Backup v8.7.4 (partial fix) Test Environment: Windows --- Remediation --- Technical Documentation & POC Tools 1. Security Advisory Files - Complete technical analysis of hardcoded keys (includes Ghidra/WinDbg reverse engineering, KDF recovery, decryption oracle techniques) - MachineGuid-based job file encryption bypass analysis 2. POC Tools > ⚠️ Warning: POC tools are for use in controlled testing environments only. Strictly prohibited from running on production systems --- Disclosure Timeline