Closed yoav-orca closed 3 years ago
I was comparing the output of gosecretsdump to secretsdump and found a small output issue: https://github.com/SecureAuthCorp/impacket/blob/a16198c3312d8cfe25b329907b16463ea3143519/impacket/examples/secretsdump.py#L2123
Compared to this: https://github.com/C-Sto/gosecretsdump/blob/f7230a2bec7baffa4c2029daaf31ae40e18eab30/pkg/ditreader/records.go#L87
nsAMAccountName should be used instead of the two parts of the nuserPrincipalName
nsAMAccountName
nuserPrincipalName
I was comparing the output of gosecretsdump to secretsdump and found a small output issue: https://github.com/SecureAuthCorp/impacket/blob/a16198c3312d8cfe25b329907b16463ea3143519/impacket/examples/secretsdump.py#L2123
Compared to this: https://github.com/C-Sto/gosecretsdump/blob/f7230a2bec7baffa4c2029daaf31ae40e18eab30/pkg/ditreader/records.go#L87
nsAMAccountNameshould be used instead of the two parts of thenuserPrincipalName