search

orlyjamie / mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.
1.82k stars 334 forks source link

Bad output #4

Closed tristandostaler closed 8 years ago

tristandostaler commented 8 years ago

I don't know why, but in the output, there is still the formating text ex: {1,50} and no passwords. ex: Slack &crumb=.{1,70}&email=.{1,50}&password=.{1,48}" ?y?? C? Slack &crumb=.{1,70}&email=.{1,50}&password=.{1,48}" x<? X?blob-code blob-code-inner js-fi CitrixNetScaler login=.{1,32}&passwd=.{1,22}&PPSX=" ?z?? ??9(x# CitrixNetScaler login=.{1,32}&passwd=.{1,22}&PPSX="  ?z?? ?bgnkhhnn

orlyjamie commented 8 years ago

Hi Mate,

I've seen this happen when you browse to the github page before running the script - this is because technically your putting these literal strings in memory by viewing them in the browser. Try kill the process, log in again to your target service and re-run the script without browsing to the mimikatz page.

tristandostaler commented 8 years ago

Thanks!