Mimikatz

[sulaimanbale]

I bellive that the mimikatz attack is not working. Kindly help. Alredy placed a mimikataz in the c:/user/ directories.

[privateducky]

can you click the star icon (in your screenshot) to show the error message?

[sulaimanbale]

Already have mimikataz. Victim view of installed miikatz.

[privateducky]

it looks like the command (in the ability) is "invoke-mimikittenzmimikatz.exe" and what it should be is "invoke-mimikittenz". Can you try changing the ability file to this?

[sulaimanbale]

ok sure ill update

[sulaimanbale]

May i know where is the directory to find this mimikatz so that i can change ?

[sulaimanbale]

[sulaimanbale]

Is it this?

[khyberspache]

You're trying to run two different tools in the same ability. You need to add both payloads with a payload: mimikatz.exe,invoke-mimikittenz.ps1 and you actually need to import the mimikittenz module and execute it. You also need to pass the mimikatz binary flags.

[sulaimanbale11]

Okay thank you, any chances of you knowing which module to use to dump credentials from a windows server ?

[privateducky]

credential dumping can occur through a lot of different mechanism. we don't want to give too much advice in which module to use, as there is such variance based on your objectives ;)

Closing this ticket as it seems the main solution is solved.