from __future__ import division

from __future__ import print_function

from __future__ import unicode_literals

from datetime import datetime

from impacket import version

from impacket.dcerpc.v5 import transport

from impacket.dcerpc.v5.epm import hept_map

from impacket.dcerpc.v5.gkdi import MSRPC_UUID_GKDI, GkdiGetKey, GroupKeyEnvelope

from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, RPC_C_AUTHN_LEVEL_PKT_PRIVACY

from impacket.dpapi_ng import EncryptedPasswordBlob, KeyIdentifier, compute_kek, create_sd, decrypt_plaintext, unwrap_cek

from impacket.examples import logger

from impacket.examples.utils import parse_credentials

from impacket.ldap import ldap, ldapasn1

from impacket.smbconnection import SMBConnection, SessionError

from pyasn1.codec.der import decoder

from pyasn1_modules import rfc5652

import argparse

import json

import logging

import sys

class GetLAPSPassword:

self.printTable(entries,['Host','LAPS Username','LAPS Password','LAPS Password Expiration', 'LAPSv2'], self.__outputFile)

if __name__ == '__main__':

print((version.BANNER))

parser = argparse.ArgumentParser(add_help = True, description = "Extract LAPS passwords from LDAP")

parser.add_argument('target', action='store', help='domain[/username[:password]]')

parser.add_argument('-computer', action='store', metavar='computername', help='Target a specific computer by its name')

parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')

parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')

parser.add_argument('-outputfile', '-o', action='store', help='Outputs to a file.')

group = parser.add_argument_group('authentication')

group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')

group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')

group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '

'(KRB5CcnAME) based on target parameters. If valid credentials '

'cannot be found, it will use the ones specified in the command '

'line')

group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '

'(128 or 256 bits)')

group = parser.add_argument_group('connection')

group.add_argument('-dc-ip', action='store', metavar='ip address', help='IP Address of the domain controller. If '

'ommited it use the domain part (FQDN) '

'specified in the target parameter')

group.add_argument('-dc-host', action='store', metavar='hostname', help='Hostname of the domain controller to use. '

'If ommited, the domain part (FQDN) '

'specified in the account parameter will be used')

if len(sys.argv)==1:

parser.print_help()

sys.exit(1)

options = parser.parse_args()

# Init the example's logger theme

logger.init(options.ts)

if options.debug is True:

logging.getLogger().setLevel(logging.DEBUG)

# Print the Library's installation path

logging.debug(version.getInstallationPath())

else:

logging.getLogger().setLevel(logging.INFO)

domain, username, password = parse_credentials(options.target)

if domain == '':

logging.critical('Domain should be specified!')

sys.exit(1)

if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:

from getpass import getpass

password = getpass("Password:")

if options.aesKey is not None:

options.k = True

try:

executer = GetLAPSPassword(username, password, domain, options)

executer.run()

except Exception as e:

if logging.getLogger().level == logging.DEBUG:

import traceback

traceback.print_exc()

logging.error(str(e))