skills.homes logoskills.homescapability registry
home/categories/domain-utilities/blacklanternsecurity-red-run-skills-ad-credential-dumping-skill-md
cd ..
domain-utilitiestools

credential-dumping

Extracts credentials from Active Directory: DCSync replication, NTDS.dit database extraction, SAM hive dump, Azure AD Connect (ADSync) credential extraction, LAPS passwords (legacy + Windows LAPS), gMSA passwords (KDS root key + GoldenGMSA), dMSA exploitation (BadSuccessor CVE-2025-21293), DSRM credentials, and EFS-encrypted file decryption.

View Sourcedomain-utilities
blacklanternsecurity
maintainer
blacklanternsecurity
Updated 3/25/2026
Stars
126
Forks
14
quick start

Installation and usage

Extracts credentials from Active Directory: DCSync replication, NTDS.dit database extraction, SAM hive dump, Azure AD Connect (ADSync) credential extraction, LAPS passwords (legacy + Windows LAPS), gMSA passwords (KDS root key + GoldenGMSA), dMSA exploitation (BadSuccessor CVE-2025-21293), DSRM credentials, and EFS-encrypted file decryption.

Installation
$ install --globalskills.sh
Usage

Once installed, you can use this skill by running the following command in your terminal:

skills use credential-dumping