Awesome

LAPSDumper

Usage:

Basic:

$ python laps.py -u user -p password -d domain.local

Pass the Hash, specific LDAP server:

$ python laps.py -u user -p e52cac67419a9a224a3b108f3fa6cb6d:8846f7eaee8fb117ad06bdd830b7586c -d domain.local -l dc01.domain.local

TODO: Cross-domain targeting https://gist.github.com/jstnkndy/51fc44d95e4f8f5efb1b76a9d6cf920a