Awesome

Net-GPPPassword

.NET/C# implementation of Get-GPPPassword. Retrieves the plaintext password and other information for accounts pushed through Group Policy Preferences.

If you have no idea what this is about, then please read: https://adsecurity.org/?p=2288. The technique is old, but can still be valuable in environments where a domain was created long ago.

Usage

Net-GPPPassword.exe [ADdomain (optional)]

Also works with Cobalt Strike's execute-assembly.

Compiled versions

Check out Releases: https://github.com/outflanknl/Net-GPPPassword/releases.

Credits

Author: Stan Hegt (@StanHacked) / Outflank

Original PowerShell implementation by Chris Campbell (@obscuresec): https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Get-GPPPassword.ps1