Awesome
LAPSDumper
Usage:
Basic:
$ python laps.py -u user -p password -d domain.local
Pass the Hash, specific LDAP server:
$ python laps.py -u user -p e52cac67419a9a224a3b108f3fa6cb6d:8846f7eaee8fb117ad06bdd830b7586c -d domain.local -l dc01.domain.local
TODO: Cross-domain targeting https://gist.github.com/jstnkndy/51fc44d95e4f8f5efb1b76a9d6cf920a