#!/usr/bin/env python3

import base64
import struct
import sys

b64sid = sys.argv[1]
binsid = base64.b64decode(b64sid)
a, N, cccc, dddd, eeee, ffff, gggg = struct.unpack("BBxxxxxxIIIII", binsid)
bb, bbbb = struct.unpack(">xxHIxxxxxxxxxxxxxxxxxxxx", binsid)
bbbbbb = (bb << 32) | bbbb

print(f"S-{a}-{bbbbbb}-{cccc}-{dddd}-{eeee}-{ffff}-{gggg}")

lookupnames <UserName>

wmic useraccount where name='tony.ward' get sid

Domain SID

impacket-getPac -targetUser administrator breach.vl/svc_mssql:Trustno1

or

impacket-lookupsid breach.vl/svc_mssql:[email protected]