login-securite / DonPAPI

Dumping DPAPI credz remotely
GNU General Public License v3.0
960 stars 114 forks source link

Domain controllers SAM hashes not showned in GUI #93

Open Dfte opened 5 hours ago

Dfte commented 5 hours ago

For some reason, the SAM database of domain controllers is not showned in the GUI, probably not stored in the DB.

image

While domain controllers SAM are disabled, having the DSRM hash account can be useful. Especially for persistence.

Dfte commented 3 hours ago

Everything's ok with the database, looks like it's the server.py which is not retrieving them: image

It only shows computer_id 3 while I also have a computer_id 1 (the DC):

image

Dfte commented 2 hours ago

Ok I found the root cause which I should have seen way before if I was blind :

image

I'm still questioning if this is a good thing to filter on DC's. A secret is a secrets and can be used in multiple ways so....