Open AddaxSoft opened 4 years ago
@AddaxSoft it works fine under win10 1903, thank you so much, you made my life much easier!
Hello. I am getting the following errors below when using Invoke-Mimikatz. However, I am using a newer Windows version and a newer build - Win 10 Version 1909 build 18363.592. And I am using the latest powersploit modules as I downloaded it earlier this week.
Exception calling "GetMethod" with "1" argument(s): "Ambiguous match found." At C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\PowerSploit\Exfiltration\Invoke-Mimikatz.ps1:886 char:6
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : AmbiguousMatchException
You cannot call a method on a null-valued expression. At C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\PowerSploit\Exfiltration\Invoke-Mimikatz.ps1:893 char:6
+ CategoryInfo : InvalidOperation: (:) [], RuntimeException
+ FullyQualifiedErrorId : InvokeMethodOnNull
Cannot find an overload for "GetDelegateForFunctionPointer" and the argument count: "2". At C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\PowerSploit\Exfiltration\Invoke-Mimikatz.ps1:489 char:3
+ CategoryInfo : NotSpecified: (:) [], MethodException
+ FullyQualifiedErrorId : MethodCountCouldNotFindBest
VirtualAlloc failed to allocate memory for PE. If PE is not ASLR compatible, try running the script in a new PowerShell process (the new PowerShell process will have a different memory layout, so the address the PE wants might be free). At C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\PowerSploit\Exfiltration\Invoke-Mimikatz.ps1:2285 char:4
+ CategoryInfo : OperationStopped: (VirtualAlloc fa...might be free).:String) [], RuntimeException
+ FullyQualifiedErrorId : VirtualAlloc failed to allocate memory for PE. If PE is not ASLR compatible, try running the script in a new PowerShell process (the new PowerShell process wil
l have a different memory layout, so the address the PE wants might be free).
updated mimikatz 2.1 to 2.2 latest (31 oct 2019) fixed VirtualAlloc issues on Win 10 version 1903 build 18362