Impacket Get-GPPPassword

Decrypt Group Policy Preference (GPP) passwords from XML files

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool

impacket-Get-GPPPassword

Category

Credential Attacks / Password Manipulation

Platform

linux

Requires

shell access

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

impacket-Get-GPPPassword -xmlfile Groups.xml

Examples

impacket-Get-GPPPassword -xmlfile Groups.xml

Tags

impacket gpp group-policy password sysvol

Related commands

• bloodyAD add uac Toggle UserAccountControl flags on a target account. Setting DONT_REQ_PREAUTH on a user…
• BloodyAD Force Password Change Force password change using BloodyAD
• bloodyAD Set Password Reset another user's password if you have ForceChangePassword…
• Impacket changepasswd Change an AD user's password via RPC (requires appropriate ACL rights)
• Net RPC Password Change Force password change via Net RPC
• NetExec change-password Module Reset a user's password when they are flagged STATUS_PASSWORD_MUST_CHANGE — typical…
• NetExec SMB GPP AutoLogin Search Group Policy Preferences for AutoLogon credentials stored in SYSVOL
• NetExec SMB GPP Password Search SYSVOL for Group Policy Preference XML files containing encrypted passwords