# Dump GMSA

Using the protocol LDAP you can extract the password of a gMSA account if you have the right.

{% hint style="warning" %}
LDAPS is required to retrieve the password, using the --gmsa LDAPS is automatically selected
{% endhint %}

```
$ crackmapexec ldap <ip> -u <user> -p <pass> --gmsa
```

<figure><img src="https://3800235601-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fx4pJgNiBOMLG3QHRPFAy%2Fuploads%2FnvF8ioeiCINyZiWDXnw1%2Fimage.png?alt=media&#x26;token=1dc4ba2c-06d1-43f7-ad32-9a9304f625a6" alt=""><figcaption></figcaption></figure>