This repo contains tools supporting the blog post WAM BAM - Recovering Web Tokens From Office
https://blog.xpnsec.com/wam-bam/
- TBRES - Decrypt stored TBRES files to gather various tokens.
- WLIDTokenRetriever - Uses RPC to retrieve passport tokens from wlidsvc.