goLAPS

This post introduces goLAPS, an open-source Golang tool from SensePost/Orange Cyberdefense that enables retrieving and setting Microsoft LAPS passwords against a Domain Controller, with options for targeting, authentication, computer-name filtering, and CSV export. It details the ‘get’ and ‘set’ commands, notes that binaries are auto-built via GitHub workflows, reports successful use in real assessments, and acknowledges a current limitation (no hash-based authentication) with plans to address it.