Crackmapexec-LAPS
LAPS module for CrackMapExec
Make sure to point to the DC
Specify the full domain name
Be careful the rid 500 might not be “Administrator”
Usage:
crackmapexec smb IP -u USER -d DOMAIN.COM -H NTLM-HASH -M laps
crackmapexec smb IP -u USER -d DOMAIN.COM -p CLEAR-TEXT -M laps
Module by technobro
Grazie: per CME byt3bl33d3r @snowscan @HackAndDo
Credit: @n00py1 Credit Reference: https://www.n00py.io/2020/12/dumping-laps-passwords-from-linux/
Credit https://github.com/n00py/LAPSDumper
