skelsec / pypykatz

Mimikatz implementation in pure Python
MIT License
2.81k stars 371 forks source link

Exception: Could not find module! lsasrv.dll #107

Open thatpham opened 2 years ago

thatpham commented 2 years ago

I dump secrets with command: pypykatz lsa minidump lsass.dmp I got error with "Could not find module! lsasrv.dll". Can you help me where directory which load file lsarv.dll. Thanks.

bill-e-ghote commented 1 year ago

Can we expect 'lsa minidump' to work on Linux if it requires lsasrv.dll? Pywin is not supported on Linux, Pypiwin is too old (syntax errors on Python 3.* in print statements at least). Where would this module come from for non-Windows users?

skelsec commented 1 year ago

pypykatz doesn't require lsasrv.dll, the error message means that the dll was not found in the dump file. Most likely the issue is caused by the pypykatz version @thatpham used did not have the matching signature for that particular windows build.
pypykatz parses mindump on any operating system where python works, the entire parsing is implemented in python.

SeiV-K commented 10 months ago

pypykatz doesn't require lsasrv.dll, the error message means that the dll was not found in the dump file. Most likely the issue is caused by the pypykatz version @thatpham used did not have the matching signature for that particular windows build. pypykatz parses mindump on any operating system where python works, the entire parsing is implemented in python.

I think i do encounter same issue on some specific machines whereas in others i dont. How can i handle that situation and how to know which version would work for me ? Please check my issue that i just created https://github.com/skelsec/pypykatz/issues/137