Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

dpapi::chrome "/unprotect" error #83

Open
merrychrishna opened this issue Dec 29, 2020 · 1 comment
Open

dpapi::chrome "/unprotect" error #83

merrychrishna opened this issue Dec 29, 2020 · 1 comment

Comments

@merrychrishna
Copy link

merrychrishna commented Dec 29, 2020

https://github.com/samratashok/nishang/blob/master/Gather/Invoke-Mimikatz.ps1

when i run this command
Invoke-Mimikatz -Command dpapi::chrome /in:"%localappdata%\Google\Chrome\User Data\Default\Login Data" /unprotect

I get an error for /unprotect so mimikatz will not decrypt the chrome file.
What am doing wrong?

error
`Invoke-Mimikatz : A positional parameter cannot be found that accepts argument '/unprotect'.
At C:\Users\test\Desktop\mimikatz nishang\Invoke-Mimikatz.ps1:2754 char:1

  • Invoke-Mimikatz -Command dpapi::chrome /in:"%localappdata%\Google\Chr ...`

And if I run this command
Invoke-Mimikatz -Command '"dpapi::chrome /in:""%localappdata%\Google\Chrome\User Data\Default\Login Data"" /unprotect"'

I get this error
` mimikatz(powershell) # dpapi::chrome /in:
ERROR kuhl_m_dpapi_chrome ; Input 'Login Data' file needed (/in:"%localappdata%\Google\Chrome\User Data\Default\Login Data")

mimikatz(powershell) # %localappdata%\Google\Chrome\User Data\Default\Login Data"
ERROR mimikatz_doLocal ; "C:\Users\user4\AppData\Local\Google\Chrome\User" command of "standard" module not found !

Module : standard
Full name : Standard module
Description : Basic commands (does not require module name)

        exit  -  Quit mimikatz
         cls  -  Clear screen (doesn't work with redirections, like PsExec)
      answer  -  Answer to the Ultimate Question of Life, the Universe, and Everything
      coffee  -  Please, make me a coffee!
       sleep  -  Sleep an amount of milliseconds
         log  -  Log mimikatz input/output to file
      base64  -  Switch file input/output base64
     version  -  Display some version informations
          cd  -  Change or display current directory
   localtime  -  Displays system local date and time (OJ command)
    hostname  -  Displays system local hostname

mimikatz(powershell) # /unprotect
ERROR mimikatz_doLocal ; "/unprotect" command of "standard" module not found !

Module : standard
Full name : Standard module
Description : Basic commands (does not require module name)

        exit  -  Quit mimikatz
         cls  -  Clear screen (doesn't work with redirections, like PsExec)
      answer  -  Answer to the Ultimate Question of Life, the Universe, and Everything
      coffee  -  Please, make me a coffee!
       sleep  -  Sleep an amount of milliseconds
         log  -  Log mimikatz input/output to file
      base64  -  Switch file input/output base64
     version  -  Display some version informations
          cd  -  Change or display current directory
   localtime  -  Displays system local date and time (OJ command)
    hostname  -  Displays system local hostname`
@evilAdan0s
Copy link

Check your path, i see they has some error by space key.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants