@podalirius_ and I made GPP Passwords great again. We wrote a Python script, using Impacket, to find and decrypt passwords in Group Policy Preferences, without having to mount the remote share 👇[a thread]
➡️ github.com/SecureAuthCorp…
➡️ github.com/SecureAuthCorp…
The script can be directly added to Impacket's examples (like in the PR above) but it can also be run as a standalone tool (clone the repo below)
github.com/ShutdownRepo/G…
github.com/ShutdownRepo/G…
Just like all other Impacket examples, the logging is color-less and it can be quite a mess (with the -debug option)
However, grc (github.com/garabik/grc) can bring colors to the output
However, grc (github.com/garabik/grc) can bring colors to the output
Exegol (github.com/ShutdownRepo/E…) offers some grc configurations that are reeeeeally useful for tools like ntlmrelayx, secretsdump, and now Get-GPPPassword
Oh by the way, since Get-GPPPassword is based on Impacket, it can pass-the-hash, pass-the-key, pass-the-ticket and overpass-the-hash 💪
Want to learn about this (almost) 10 year old technique? read the following thehacker.recipes/active-directo…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
