An open API service indexing awesome lists of open source software.

https://github.com/vletoux/ntlminjector

In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
https://github.com/vletoux/ntlminjector

Last synced: about 1 year ago
JSON representation

In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)

Awesome Lists containing this project

README

          

# NTLMInjector
In case you didn't now how to restore the user password after you have done a user password resset
(Reminder: get the hash previous with DCSync as domain admin)

Right required: user reset password (no domain admin)
Works remotely

Done using SamSetInformationUser(SAMPR_USER_INTERNAL1_INFORMATION)

Know caveat:
Kerberos AES256 (and other special keys) not changed

# SetNTLM
Change the password based on the user hash (or password)
Bonus: bypass security policies for checking password strength

(but avoid security filter which can cause problem when synchronizing password in Enterprise environment)