gMSA & LAPS Commands

6 gMSA & LAPS commands from the Credential Attacks category, each with its placeholders, supported authentication methods and upstream references.

Tools covered: bloodyAD, impacket-GetLAPSPassword, nxc, python

• BloodyAD LAPS Password Read Read LAPS passwords from Active Directory using BloodyAD
• gMSA Password Dump Read password of Group Managed Service Account
• Impacket GetLAPSPassword Retrieve LAPS managed local administrator passwords from Active Directory
• NetExec LAPS Module (Read ms-MCS-AdmPwd) Read LAPS-managed local admin passwords from ms-MCS-AdmPwd / msLAPS-Password attributes for every computer…
• NetExec LDAP gMSA Dump Read Group Managed Service Account passwords via NetExec
• NetExec LDAP LAPS Retrieve LAPS managed local administrator passwords from Active Directory via LDAP