ERROR kuhl_m_sekurlsa_acquireLSA ; Logon list

gentilkiwi / mimikatz

A little tool to play with Windows security

http://blog.gentilkiwi.com/mimikatz

18.99k stars 3.62k forks source link

ERROR kuhl_m_sekurlsa_acquireLSA ; Logon list #390

Open kmohamed2020 opened 2 years ago

kmohamed2020 commented 2 years ago

I have an issue while trying to extract the logonpasswords using Mimikatz even by creating a LSASS dump file and trying to extract the logonpasswords from it.

tried the last release of Mimikatz as shown in the below screenshot on windows 11

0xJs commented 2 years ago

Same for windows 2022

init5-SF commented 12 months ago

Same for me.

Testing on Windows 11 x64 (22H2), AV is shut down, I am running as Administrator and no LSA protection/ASR/Credential Guard enabled.

useragent23253 commented 11 months ago

Same thing. Someone solved it?

k3rwin commented 10 months ago

ebalo55 commented 8 months ago

This pull request #432 may be the fix we're all looking for, but i have not yet checked if it works.

.########## .# UPDATE # .########## I've just tested the code from the above-linked pull request, apart from the required modification to the built environment in order to target W11, it works like a charm, tested in the latest W11 fully patched.

Compiling from sources requires Visual Studio, perfectly fine with the latest community 2022 release. Required modification in order to compile from sources:

Install MSVC for your compiler version (mine was the latest)
Retarget the project to your compiler version
Disable treating warnings as errors

Then compile ONLY the "mimikatz" sub-project as the other are not needed and requires further compilation effort.

useragent23253 commented 8 months ago

I was trying to compile using VS2022 but got lots of errors. MFC already installed. Also tried change different options in compiler but nothing changed.

ebalo55 commented 8 months ago

In my case vs22 defaulted to ARM infrastructure once I opened the project, I switched it back to x64 and also ensured to build in release mode in order to avoid the need to generate eventually missing debug symbols.

useragent23253 commented 8 months ago

I did the same things, but got errors... Could u share your build? I'd like to test it on my VM.

ebalo55 commented 8 months ago

I did the same things, but got errors... Could u share your build? I'd like to test it on my VM.

Here is the cloned repo: https://github.com/ebalo55/mimikatz

useragent23253 commented 8 months ago

Thanks bro, working))