A python script to list gMSA account and KDS Key.

Installation

You can install it from pypi (latest version is ) with this command:

sudo python3 -m pip install GoldenGMSA

OR from source :

git clone https://github.com/AetherBlack/GoldenGMSA
cd GoldenGMSA
sudo python3 -m pip install -r requirements.txt
sudo python3 setup.py install

OR with pipx :

python3 -m pipx install git+https://github.com/AetherBlack/GoldenGMSA/

Examples

• You want to list gMSA accounts with Kerberos Authentication:

GoldenGMSA -k -use-ldaps -port 636 gmsainfo $DOMAIN/$USER:"$PASSWORD"@$KDC

• You want to list KDS Key:

GoldenGMSA kdsinfo $DOMAIN/$USER:$PASSWORD

• You want to list gMSA accounts:

GoldenGMSA gmsainfo $DOMAIN/$USER:$PASSWORD

How it works

The tool will connect to the DC's LDAP to list gMSA and their msDS-ManagedPassword if possible.

---

Credits

• @Semperis for developping GoldenGMSA in C#
• @fortra for developping impacket

License

GNU General Public License v3.0