Closed theabraxas closed 8 years ago
Same issue here, happens to all output
Same here.
Same here.
See #4
[Non-issue]
- Victim user would never be browsing this github, if they are you already failed :laughing:
So was there any particular reason this was closed non issue?
Hello ionrover2, please checkout https://github.com/putterpanda/mimikittenz/issues/4
- For sake of explanation - The reason users are seeing this strange output is because they've viewed the powershell code from the same browser that they are dumping process memory from.
In-case that's not self explanatory, the powershell code does not actually know what is a password and what is not, all it is doing is going through the memory space utilizing regular expressions - So it's actually doing it's job by picking these out.
It was labelled as a [Non-issue]
due to the fact that in a real-world scenario, these strings are not going to already exist within a victims browser process memory (Unless the victim user has been looking at this code in their browser before-hand) .. If the victim is looking at this code in their browser before you run the script - You've got bigger things to worry about :laughing:
That makes perfect sense. My bad.
All good mate, thanks for double checking :+1:
Results all look like this:
PatternName PatternMatch
CitrixNetScaler login=.{1,22}&passwd=.{1,42}"xml D A ?J ...
The ellipses at the end for each line in the result, It happens both when I run it in terminal and > to output file. I assume there's some line/width buffer that can be increased? Would definitely be worth adding to the docs.