https://github.com/vletoux/ntlminjector
In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
https://github.com/vletoux/ntlminjector
Last synced: about 1 year ago
JSON representation
In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
- Host: GitHub
- URL: https://github.com/vletoux/ntlminjector
- Owner: vletoux
- Created: 2017-06-04T07:25:36.000Z (about 9 years ago)
- Default Branch: master
- Last Pushed: 2017-06-08T19:01:21.000Z (about 9 years ago)
- Last Synced: 2025-02-27T17:45:57.014Z (over 1 year ago)
- Language: PowerShell
- Homepage:
- Size: 3.91 KB
- Stars: 163
- Watchers: 8
- Forks: 29
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# NTLMInjector
In case you didn't now how to restore the user password after you have done a user password resset
(Reminder: get the hash previous with DCSync as domain admin)
Right required: user reset password (no domain admin)
Works remotely
Done using SamSetInformationUser(SAMPR_USER_INTERNAL1_INFORMATION)
Know caveat:
Kerberos AES256 (and other special keys) not changed
# SetNTLM
Change the password based on the user hash (or password)
Bonus: bypass security policies for checking password strength
(but avoid security filter which can cause problem when synchronizing password in Enterprise environment)