Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[FEATURE REQUEST] Allow unprivileged users to run Mimikatz commands #193

Closed
shelladdection opened this issue May 1, 2020 · 1 comment · Fixed by #200
Closed

[FEATURE REQUEST] Allow unprivileged users to run Mimikatz commands #193

shelladdection opened this issue May 1, 2020 · 1 comment · Fixed by #200
Labels
enhancement New feature or request

Comments

@shelladdection
Copy link

Is your feature request related to a problem? Please describe.
in mimikatz.exe you can run things without admin user like: dpapi::masterkey
but in mimikatz module in Empire non privilege users can't run mimikatz commands

Describe the solution you'd like
please allow unprivileged users to use "/credentials/mimikatz/command" in order to use dpapi::masterkey

Describe alternatives you've considered
N/A

Additional context
@shelladdection shelladdection added the enhancement New feature or request label May 1, 2020
@Cx01N
Copy link

Cx01N commented May 1, 2020

We will look into this. Thank you.
FYI for the future, please provide a title for your feature requests or bug issues.

@Cx01N Cx01N changed the title [FEATURE REQUEST] [FEATURE REQUEST] Allow unprivileged users to run Mimikatz commands May 1, 2020
Cx01N added a commit that referenced this issue May 7, 2020
@Cx01N
Updated Mimikatz command to have option to run without admin - #193
8e6b905
@Cx01N Cx01N linked a pull request May 7, 2020 that will close this issue
Updated Mimikatz to 20200502 TPM, IF & XOR #200
Merged
@Cx01N Cx01N closed this as completed May 11, 2020
vinnybod pushed a commit that referenced this issue Aug 17, 2021
@jamarir
Fix: modules (Get-SQLServerLoginDefaultPw, PortScan), standalone (Get…
97656a9 
…-SystemDNSServer) (#193)

* portscan module filtering output depending on the alive attribute.

It doesn't mean that the result shows that "alive" is false that there are no openports.
When the switch -SkipDiscovery is set (equivalent to nmap -Pn), then this attribute is always false (but open ports remains).

* Path to module source corrected

* Fix: Get-SystemDNSServer gets value from array

The previous code wompared if "$DNSConfig.IsIPv6SiteLocal" is false.
However, $DNSConfig is an array, whose items have "IsIPv6SiteLocal" attribute.
This version returns wanted results in the target's PowerShell console.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Updated Mimikatz to 20200502 TPM, IF & XOR BC-SECURITY/Empire
2 participants
@Cx01N @shelladdection