rapid7/metasploit-framework — pull request #351 by trolldbois (2012-04-24 15:49:09+00:00)
Title: Meterpreter script that search for GPO local users password and decrypt them - win2k8

Based on Gpprefdecrypt.py - Decrypt the password of local users added via Windows 2008 Group Policy Preferences.

http://esec-pentest.sogeti.com/exploiting-windows-2008-group-policy-preferences ( emilien girault )

This tool decrypts the cpassword attribute value embedded in the Groups.xml file stored in the domain controller's Sysvol share.

Provided by Loic Jaquemet - loic dot jaquemet at gmail.com