search

Pennyw0rth / NetExec

The Network Execution Tool
https://netexec.wiki/
BSD 2-Clause "Simplified" License
2.91k stars 310 forks source link

Update handlekatz.py pypykatz import #389

Closed 3ldidi94 closed 2 months ago

3ldidi94 commented 2 months ago

Fix pypykatz import in handlekatz

NeffIsBack commented 2 months ago

Hey thanks again for the bug fix PR! Somehow i can't get handlekatz to dumpy the process, even when executing the binary manually on the system. Any idea why this is? No AV present image

3ldidi94 commented 2 months ago

Hey ! No problem, I had an error while parsing my dump "pypykatz has no attribute parse_minidum_external" and I don't have this when I am using the nanodump module.

About your issue using handlekatz, I am using this module but not the handlekatz binary in order to dump the lsass process. I will try it on my side and let you know if I have the same issue

NeffIsBack commented 2 months ago

Well, doing a manual dump and parsing it still doesn't work for some reason, but atleast the pypykatz import is fixed with this PR image

3ldidi94 commented 2 months ago

Hey thanks again for the bug fix PR! Somehow i can't get handlekatz to dumpy the process, even when executing the binary manually on the system. Any idea why this is? No AV present image

I am not using handlkatz, I have adapted another lsass dumper to make it work with the handlekatz module. Did you fill the variable handlekatz_b64 in the HandleKatz.h file?

NeffIsBack commented 2 months ago

I didn't pack the file myself. @mpgn wrote the module, not sure what you need to fill in. Maybe we should just repackage the binary though