search

login-securite / lsassy

Extract credentials from lsass remotely
https://en.hackndo.com/remote-lsass-dump-passwords/
MIT License
2.04k stars 246 forks source link

Scheduled Task #58

Closed OffenseTeacher closed 3 years ago

OffenseTeacher commented 3 years ago

Hi,

Is there a reason the scheduled task is scheduled to run every day at the same hour? From my understanding, it should run only once and on demand. In case the scheduled task fails to get deleted, it will dump lsass for eternity.

File: https://github.com/Hackndo/lsassy/blob/master/lsassy/exec/taskexe.py

Code: `

<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"> <Triggers> <CalendarTrigger> <StartBoundary>2015-07-15T20:35:13.2757294</StartBoundary> <Enabled>true</Enabled> <ScheduleByDay> <**_DaysInterval>1</DaysInterval_**>

`

Thanks :)

Hackndo commented 3 years ago

Hey there, Please use branch 3.0.0, here it only executes once. https://www.github.com/Hackndo/lsassy/tree/3.0.0/lsassy%2Fexec%2Ftask.py I might update master someday also (or you could PR if you in a rush) Thanks!

Hackndo commented 3 years ago

(See PR https://github.com/Hackndo/lsassy/pull/54 for branch 3.0.0)

Hackndo commented 3 years ago

Ok I fixed it on master, and published a new release with this fix and other minor fixes.