search

guardicore / monkey

Infection Monkey - An open-source adversary emulation platform
https://www.guardicore.com/infectionmonkey/
GNU General Public License v3.0
6.63k stars 773 forks source link

Mimikatz dll outdated #471

Closed VakarisZ closed 4 years ago

VakarisZ commented 4 years ago

Describe the bug Mimikatz credential collection seems to fail collecting credentials on windows 10. Not sure which mimikatz version is forked here (1.1 ?) but the latest one is 2.2 and it manages to collect win10 credentials.

khast3x commented 4 years ago

Hey @VakarisZ ,

I was looking into replacing with a newer Mimikatz version (as documented here) but it seems the Guardicore team uses a modified Mimikatz version.

I'm guessing they'll have to apply to same edits to the newer Mimikatz code to integrate it.

VakarisZ commented 4 years ago

Yes. Hopefully we can do it on the following release

khast3x commented 4 years ago

Hello,

I was playing with pypkatz and was thinking that it would be a nice fit for fixing this issue.

Furthermore, doing the hash crypto operations on the Island and sending them back to the Monkey means less noise in the field too.
I don't have the means to contribute the appropriate PR but I hope the idea can help.

This might also fit with the ongoing work for #514.

Cheers!

VakarisZ commented 4 years ago

Hmmm... Interesting. We'll be taking a look, thanks!

ShayNehmad commented 4 years ago

We decided to go with pypykatz #583

khast3x commented 4 years ago

Glad the suggestion helped, looking forward to the update. Cheers