{"id":17244622,"url":"https://github.com/kost/gpp-decrypt-ruby","last_synced_at":"2025-08-26T22:32:58.726Z","repository":{"id":56875117,"uuid":"111241743","full_name":"kost/gpp-decrypt-ruby","owner":"kost","description":"Group Policy Preferences (GPP) password decryption","archived":false,"fork":false,"pushed_at":"2017-11-18T21:47:30.000Z","size":6,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-07-27T20:40:35.038Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kost.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-11-18T21:44:06.000Z","updated_at":"2023-11-16T22:24:33.000Z","dependencies_parsed_at":"2022-08-20T22:00:44.026Z","dependency_job_id":null,"html_url":"https://github.com/kost/gpp-decrypt-ruby","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/kost/gpp-decrypt-ruby","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kost%2Fgpp-decrypt-ruby","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kost%2Fgpp-decrypt-ruby/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kost%2Fgpp-decrypt-ruby/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kost%2Fgpp-decrypt-ruby/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kost","download_url":"https://codeload.github.com/kost/gpp-decrypt-ruby/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kost%2Fgpp-decrypt-ruby/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272262430,"owners_count":24902646,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-26T02:00:07.904Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-15T06:26:19.069Z","updated_at":"2025-08-26T22:32:58.657Z","avatar_url":"https://github.com/kost.png","language":"Ruby","readme":"# Gpp::Decrypt\n\ngpp-decrypt\n\nThis tool was released by Chris Gates on Friday, October 19, 2012. Gemification by kost.\n\nFrom Chris:\n\nGroup Policy Preferences and Getting Your Domain 0wned So i put this link out on twitter but forgot to put it on the blog.\n\nI did a talk at the Oct 20012 NovaHackers meeting on exploiting 2008 Group Policy Preferences (GPP) and how they can be used to set local users and passwords via group policy.\n\nI've run into this on a few tests where people are taking advantage of this exteremely handy feature to set passwords across the whole domain, and then allowing users or attackers the ability to decrypt these passwords and subsequently 0wning everything :-)\n\nSo here are the slides: Exploiting Group Policy Preferences from chrisgates\n\nBlog post explaining the issue in detail: http://esec-pentest.sogeti.com/exploiting-windows-2008-group-policy-preferences\n\nMetasploit post module: http://metasploit.com/modules/post/windows/gather/credentials/gpp\n\nPowerShell module to do it: http://obscuresecurity.blogspot.com/2012/05/gpp-password-retrieval-with-powershell.html\n\nI ended up writing some ruby to do it (the blog post has some python) because the metasploit module was downloading the xml file to loot but taking a poop prior to getting to the decode part. now you can do it yourself: In Action:\n\nuser@ubuntu:~$ ruby gpp-decrypt-string.rb Local*P4ssword!\n\n\n\n## Installation\n\nAdd this line to your application's Gemfile:\n\n```ruby\ngem 'gpp-decrypt'\n```\n\nAnd then execute:\n\n    $ bundle\n\nOr install it yourself as:\n\n    $ gem install gpp-decrypt\n\n## Usage\n\nJust add gpp encrypted password as argument:\n\n```\ngpp-decrypt j1Uyj3Vx8TY9LtLZil2uAuZkFQA/4latT76ZwgdHdhw\n```\n\n\n## Development\n\nAfter checking out the repo, run `bin/setup` to install dependencies. You can also run `bin/console` for an interactive prompt that will allow you to experiment.\n\nTo install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).\n\n## Contributing\n\nBug reports and pull requests are welcome on GitHub at https://github.com/kost/gpp-decrypt. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [Contributor Covenant](http://contributor-covenant.org) code of conduct.\n\n\n## License\n\nThe gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).\n\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkost%2Fgpp-decrypt-ruby","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkost%2Fgpp-decrypt-ruby","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkost%2Fgpp-decrypt-ruby/lists"}