dirkjanm / adconnectdump Goto Github PK

Hi,
One issue I noticed in adconnectdump.py script is that on Windows Server 2019 (probably on 2016 as well), the ADSync profile path is under: c:\Windows\ServiceProfiles\ADSync\AppData\Local\Microsoft\Credentials

On which OS version did you try the python script ?

thanks

While performing the command with adconnectdump referencing --existing-db and --from-file, I receive an error after 'New format keyset detected' which states:

"Local variable 'result' referenced before assignment"

Any idea what I could be missing?

Hi!

What crypto module is used and required within the tool?

"from Crypto import Random
ImportError: No module named Crypto"

Hi,

I am running ADSyncDecrypt.exe from the bin folder and using a cmd gotten from mimikatz after a "token::elevate /user:ADSync" / "misc::cmd"

`C:\Program Files\Microsoft Azure AD Sync\Bin>ADSyncDecrypt.exe
Opening database Data Source=(LocalDB).\ADSync;Initial Catalog=ADSync;Connect T
imeout=30

Unhandled Exception: System.IO.FileNotFoundException: The system cannot find the
file specified. (Exception from HRESULT: 0x80070002)
at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 e
rrorCode, IntPtr errorInfo)
at Microsoft.DirectoryServices.MetadirectoryServices.Cryptography.KeyManager.
LoadKeySet(Guid guidEntropy, Guid guidMms, UInt32 uKeySetId)
at ADSyncDecrypt.Program.Main(String[] args)`

"--legacy" option not better.

I guess I am missing something. Any idea?

Thank you,
Nico