rapid7/metasploit-framework — pull request #490 by Meatballs1 (2012-06-15 17:44:11+00:00)
Title: Post win gather creds gpp pass

Based on http://esec-pentest.sogeti.com/exploiting-windows-2008-group-policy-preferences

Enumerates Groups.xml in the SYSVOL folder.
Retrieves username and encrypted password.
Decrypts password.
Stores in loot.

Meatballs@IRC :)