redcanaryco / atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.
MIT License
9.56k stars 2.77k forks source link

Problem: AtomicRed doesn't download externaltools #2917

Open WrongProvider opened 1 week ago

WrongProvider commented 1 week ago

What did you do?

ℹ Please replace this with what you did. I ran Invoke-AtomicTest T1110.001 -TestNumbers 4

ℹ Please replace this with what you expected to happen. It was suposed to run kerbrute like this: Executing test: T1110.001-4 Password Brute User using Kerbrute Tool


/ / / /_ ___ / /___ / /// \/ / \/ / / / / / \ / ,< / / / / // / / / // / /_/ / //||_// /.// _,/_/\/ Version: v1.0.3 (9dad6e1) - 09/04/24 - Ronnie Flathers @ropnop 2024/09/04 06:36:21 > Using KDC(s): 2024/09/04 06:36:21 > LAB.LOCAL:88 2024/09/04 06:36:21 > open C:\Users\ADMINI~1\AppData\Local\Temp\2\bruteuser.txt: The system cannot find the file specified. Exit code: 0

What happened instead?

ℹ Please replace this with of what happened instead. This error happens, like with every tool that needs to run an external tool in C:\AtomicRedTeam\ExternalPayloads Executing test: T1110.001-4 Password Brute User using Kerbrute Tool .\kerbrute.exe : The term '.\kerbrute.exe' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:2 char:1

ran with Administrator