search

mitre / caldera

Automated Adversary Emulation Platform
https://caldera.mitre.org
Apache License 2.0
5.41k stars 1.04k forks source link

Powerkatz #713

Closed sulaimanbale closed 4 years ago

sulaimanbale commented 4 years ago

After running successfully powerkatz, in the json report there is no hash found. Is this a problem?

sulaimanbale commented 4 years ago

image

sulaimanbale commented 4 years ago

Where are the hashes ?

privateducky commented 4 years ago

when you download a report, you'll want to include 'agent output' as part of the download to see the actual shell output for each command.

alternatively, you can click the star icon next to the corresponding row (in the timeline that populates during a running operation) to see the output from the mimikatz ability.

sulaimanbale commented 4 years ago

image Where can i get 'agent output' ?

wbooth commented 4 years ago

@sulaimanbale you can get the output in the downloadable report, just click 'Download' on the left side

wbooth commented 4 years ago

also ensure that you are on the latest code as it was in and out and back in during the recent refactor

sulaimanbale commented 4 years ago

okay thank you! However, downlaoding does not give me the hashes of passwords.

privateducky commented 4 years ago

when you downloaded the operation report (after the operation completed), you should see an output for every ability that was run. if you look at the output related to the PowerKatz ability, what do you see?

sulaimanbale commented 4 years ago

image

There is no output as seen.

privateducky commented 4 years ago

you'll want to download with agent output (when you're on the reports modal, you'll see that option when you download). by default, the report will not include the output from each command.

sulaimanbale commented 4 years ago

okay thank you!