micahvandeusen/gMSADumper

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Lists who can read any gMSA password blobs and parses them if the current user has access.

gMSADumper

Reads any gMSA password blobs the user can access and parses the values.

Basic:

$ python3 gMSADumper.py -u user -p password -d domain.local

Pass the Hash, specific LDAP server:

$ python gMSADumper.py -u user -p e52cac67419a9a224a3b108f3fa6cb6d:8846f7eaee8fb117ad06bdd830b7586c -d domain.local -l dc01.domain.local

Kerberos Authentication, specific LDAP server:

$ python gMSADumper.py -k -d domain.local -l dc01.domain.local

Impacket for parsing the gMSA blob and some code from https://github.com/n00py/LAPSDumper/

GenericPotato

impacket-ADCS

PrologueDecrypt