seajaysec / cypheroth

Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.
BSD 2-Clause "Simplified" License
251 stars 42 forks source link

UserPassword query add #9

Closed mubix closed 4 years ago

mubix commented 4 years ago

When UserPassword is populated it's most of the time clear text credentials. Free creds are good creds.

mubix commented 4 years ago

Details here: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/f3adda9f-89e1-4340-a3f2-1f0a6249f1f8