Crackmapexec-LAPS
February 5, 2021 ยท View on GitHub
LAPS module for CrackMapExec
Make sure to point to the DC
Specify the full domain name
Be careful the rid 500 might not be "Administrator"
Usage:
crackmapexec smb IP -u USER -d DOMAIN.COM -H NTLM-HASH -M laps
crackmapexec smb IP -u USER -d DOMAIN.COM -p CLEAR-TEXT -M laps
Module by technobro
Grazie: per CME
byt3bl33d3r
@snowscan
@HackAndDo
Credit:
@n00py1
Credit Reference: https://www.n00py.io/2020/12/dumping-laps-passwords-from-linux/
Credit https://github.com/n00py/LAPSDumper