Wednesday, October 27, 2021

SharpLAPS – Retrieve LAPS Password From LDAP

The attribute ms-mcs-AdmPwd stores the clear-text LAPS password.

This executable is made to be executed within Cobalt Strike session using execute-assembly . It will retrieve the LAPS password from the Active Directory.

Require (either):

Account with ExtendedRight or Generic All Rights

or Domain Admin privilege

Usage

_____ __ __ ___ ____ _____

/ ___// /_ ____ __________ / / / | / __ \/ ___/

\__ \/ __ \/ __ `/ ___/ __ \/ / / /| | / /_/ /\__ \

___/ / / / / /_/ / / / /_/ / /___/ __…

Read More

Latest news
Related news