search

gentilkiwi / mimikatz

A little tool to play with Windows security
http://blog.gentilkiwi.com/mimikatz
18.99k stars 3.62k forks source link

Build on Windows 11 ARM64 (Microsoft Visual Studio Community 2022) #384

Open symmetrisch opened 2 years ago

symmetrisch commented 2 years ago

Read that building for arm64 was possible some years (?) ago...

Current setup reports 3 errors in kuhl_m_sekurlsa_cloudap.c

Did someone manage to build this project for arm64?

OscarXvita commented 2 months ago

Having the same issue here. This is possibly due to CloudApReferences is not defined in the ARM64 macro, however adding that won't simply work... Note that _M_ARM64 needed to be add as a case here, however I don't know the magic bytes to make this work...


#if (defined(_M_X64))
BYTE PTRN_WALL_CloudApLocateLogonSession[]  = {0x44, 0x8b, 0x01, 0x44, 0x39, 0x42};//, 0x18, 0x75};
KULL_M_PATCH_GENERIC CloudApReferences[] = {
    {KULL_M_WIN_BUILD_10_1909,  {sizeof(PTRN_WALL_CloudApLocateLogonSession),   PTRN_WALL_CloudApLocateLogonSession},   {0, NULL}, {-9}},
};
#elif defined(_M_IX86)
BYTE PTRN_WALL_CloudApLocateLogonSession[]  = {0x8b, 0x31, 0x39, 0x72, 0x10, 0x75};
KULL_M_PATCH_GENERIC CloudApReferences[] = {
    {KULL_M_WIN_BUILD_10_1909,  {sizeof(PTRN_WALL_CloudApLocateLogonSession),   PTRN_WALL_CloudApLocateLogonSession},   {0, NULL}, {-8}},
};
#endif