> For the complete documentation index, see [llms.txt](https://www.netexec.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.netexec.wiki/ldap-protocol/dump-gmsa.md).

# Dump gMSA

Using the protocol LDAP you can extract the password of a gMSA account if you have the right.

{% hint style="warning" %}
LDAPS is required to retrieve the password, using the --gmsa LDAPS is automatically selected
{% endhint %}

```bash
nxc ldap <ip> -u <user> -p <pass> --gmsa
```