impacket
impacket copied to clipboard
add hekatomb.py to examples folder
Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.
It also automatically extract domain controller private key through RPC for decryption.
its strong point is that it uses the extracted from LDAP computers list instead of just a range of ip adresses. In that way you can't forget any unknown sub network.
More infos here : https://github.com/Processus-Thief/HEKATOMB
Hi!
Don't forget to also add the new dependency in the setup.py
file
:sunflower:
Done ! :) Let me know if something else is needed ;)
I put a little "UP" on this PR :)