search

samratashok / nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
Other
8.67k stars 2.43k forks source link

dpapi::chrome "/unprotect" error #83

Open merrychrishna opened 3 years ago

merrychrishna commented 3 years ago

https://github.com/samratashok/nishang/blob/master/Gather/Invoke-Mimikatz.ps1

when i run this command Invoke-Mimikatz -Command dpapi::chrome /in:"%localappdata%\Google\Chrome\User Data\Default\Login Data" /unprotect

I get an error for /unprotect so mimikatz will not decrypt the chrome file. What am doing wrong?

error `Invoke-Mimikatz : A positional parameter cannot be found that accepts argument '/unprotect'. At C:\Users\test\Desktop\mimikatz nishang\Invoke-Mimikatz.ps1:2754 char:1

And if I run this command Invoke-Mimikatz -Command '"dpapi::chrome /in:""%localappdata%\Google\Chrome\User Data\Default\Login Data"" /unprotect"'

I get this error ` mimikatz(powershell) # dpapi::chrome /in: ERROR kuhl_m_dpapi_chrome ; Input 'Login Data' file needed (/in:"%localappdata%\Google\Chrome\User Data\Default\Login Data")

mimikatz(powershell) # %localappdata%\Google\Chrome\User Data\Default\Login Data" ERROR mimikatz_doLocal ; "C:\Users\user4\AppData\Local\Google\Chrome\User" command of "standard" module not found !

Module : standard Full name : Standard module Description : Basic commands (does not require module name)

        exit  -  Quit mimikatz
         cls  -  Clear screen (doesn't work with redirections, like PsExec)
      answer  -  Answer to the Ultimate Question of Life, the Universe, and Everything
      coffee  -  Please, make me a coffee!
       sleep  -  Sleep an amount of milliseconds
         log  -  Log mimikatz input/output to file
      base64  -  Switch file input/output base64
     version  -  Display some version informations
          cd  -  Change or display current directory
   localtime  -  Displays system local date and time (OJ command)
    hostname  -  Displays system local hostname

mimikatz(powershell) # /unprotect ERROR mimikatz_doLocal ; "/unprotect" command of "standard" module not found !

Module : standard Full name : Standard module Description : Basic commands (does not require module name)

        exit  -  Quit mimikatz
         cls  -  Clear screen (doesn't work with redirections, like PsExec)
      answer  -  Answer to the Ultimate Question of Life, the Universe, and Everything
      coffee  -  Please, make me a coffee!
       sleep  -  Sleep an amount of milliseconds
         log  -  Log mimikatz input/output to file
      base64  -  Switch file input/output base64
     version  -  Display some version informations
          cd  -  Change or display current directory
   localtime  -  Displays system local date and time (OJ command)
    hostname  -  Displays system local hostname`
evilAdan0s commented 1 year ago

Check your path, i see they has some error by space key.