search

GhostPack / Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
Other
3.74k stars 685 forks source link

CredEnum Exception #71

Open leechristensen opened 3 years ago

leechristensen commented 3 years ago

Describe the bug When running the CredEnum command, it failed with the following exception:

ERROR:   [!] Terminating exception running command 'CredEnum': System.ComponentModel.Win32Exception (0x80004005): Element not found
   at Windows.CredEnumCommand.<Execute>d__9.MoveNext()
   at Runtime.ExecuteCommand(CommandBase command, String[] commandArgs)

It looks like it may be accessing an array incorrectly?

Another error:

ERROR:   [!] Terminating exception running command 'CredEnum': System.ComponentModel.Win32Exception (0x80004005): A specified logon session does not exist. It may already have been terminated
   at Seatbelt.Commands.Windows.CredEnumCommand.<Execute>d__9.MoveNext()
   at Seatbelt.Runtime.ExecuteCommand(CommandBase command, String[] commandArgs)

To Reproduce I don't have access to a system where I can reproduce the first error . Occurred when running the CredEnum command.

The 2nd exception be reproduced by running the CredEnum command under a command prompt started with runas /netonly /user:asdf\asdf cmd.exe

Expected behavior The module to run and dump creds, or not print anything (or a message saying there weren't any)

Observed behavior An exception was thrown

leechristensen commented 3 years ago

For the "Element not found" exception, I can reproduce it when I'm logged in as a user and then run "runas /user:blah cmd.exe" and then run Seatbelt in the new command prompt.

UP942901 commented 3 years ago

Happening to me too.

GetRektBoy724 commented 3 years ago

For the "Element not found" exception,it means that there is no creds stored on your device.

iNoSec2 commented 2 years ago

Someone has an idea about the CredEnum error?? Face the same issue rn Thank you for your time