Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dpapi::chrome "/unprotect" error #83

Open
merrychrishna opened this issue Dec 29, 2020 · 1 comment
Open

dpapi::chrome "/unprotect" error #83

merrychrishna opened this issue Dec 29, 2020 · 1 comment

Comments

@merrychrishna
Copy link

merrychrishna commented Dec 29, 2020

https://github.com/samratashok/nishang/blob/master/Gather/Invoke-Mimikatz.ps1

when i run this command
Invoke-Mimikatz -Command dpapi::chrome /in:"%localappdata%\Google\Chrome\User Data\Default\Login Data" /unprotect

I get an error for /unprotect so mimikatz will not decrypt the chrome file.
What am doing wrong?

error
`Invoke-Mimikatz : A positional parameter cannot be found that accepts argument '/unprotect'.
At C:\Users\test\Desktop\mimikatz nishang\Invoke-Mimikatz.ps1:2754 char:1

  • Invoke-Mimikatz -Command dpapi::chrome /in:"%localappdata%\Google\Chr ...`

And if I run this command
Invoke-Mimikatz -Command '"dpapi::chrome /in:""%localappdata%\Google\Chrome\User Data\Default\Login Data"" /unprotect"'

I get this error
` mimikatz(powershell) # dpapi::chrome /in:
ERROR kuhl_m_dpapi_chrome ; Input 'Login Data' file needed (/in:"%localappdata%\Google\Chrome\User Data\Default\Login Data")

mimikatz(powershell) # %localappdata%\Google\Chrome\User Data\Default\Login Data"
ERROR mimikatz_doLocal ; "C:\Users\user4\AppData\Local\Google\Chrome\User" command of "standard" module not found !

Module : standard
Full name : Standard module
Description : Basic commands (does not require module name)

        exit  -  Quit mimikatz
         cls  -  Clear screen (doesn't work with redirections, like PsExec)
      answer  -  Answer to the Ultimate Question of Life, the Universe, and Everything
      coffee  -  Please, make me a coffee!
       sleep  -  Sleep an amount of milliseconds
         log  -  Log mimikatz input/output to file
      base64  -  Switch file input/output base64
     version  -  Display some version informations
          cd  -  Change or display current directory
   localtime  -  Displays system local date and time (OJ command)
    hostname  -  Displays system local hostname

mimikatz(powershell) # /unprotect
ERROR mimikatz_doLocal ; "/unprotect" command of "standard" module not found !

Module : standard
Full name : Standard module
Description : Basic commands (does not require module name)

        exit  -  Quit mimikatz
         cls  -  Clear screen (doesn't work with redirections, like PsExec)
      answer  -  Answer to the Ultimate Question of Life, the Universe, and Everything
      coffee  -  Please, make me a coffee!
       sleep  -  Sleep an amount of milliseconds
         log  -  Log mimikatz input/output to file
      base64  -  Switch file input/output base64
     version  -  Display some version informations
          cd  -  Change or display current directory
   localtime  -  Displays system local date and time (OJ command)
    hostname  -  Displays system local hostname`
@evilAdan0s
Copy link

Check your path, i see they has some error by space key.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants