Skip to content

fengjixuchui/NTLMInjector

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

NTLMInjector

In case you didn't now how to restore the user password after you have done a user password resset (Reminder: get the hash previous with DCSync as domain admin)

Right required: user reset password (no domain admin) Works remotely

Done using SamSetInformationUser(SAMPR_USER_INTERNAL1_INFORMATION)

Know caveat: Kerberos AES256 (and other special keys) not changed

SetNTLM

Change the password based on the user hash (or password) Bonus: bypass security policies for checking password strength

(but avoid security filter which can cause problem when synchronizing password in Enterprise environment)

About

In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • PowerShell 100.0%