Re: meterpreter commands fail after impersonation

[Robin Wood <robin () digininja org>]

On 23 December 2010 06:36, Rob Fuller <mubix () room362 com> wrote:
> Try dropping to a shell under the impersonation and doing it. I
> believe the net commands (correct me if I'm wrong) are part of cmd.exe
> so try doing 'cmd /c' before the net command.

It wasn't allowing me to do any commands, even shell. I've had it
before but can't come up with any similarities on networks where it
happens. I'll try the cmd /c method next time I come across it and see
if that helps.

> Also, incognito has a add user function in it that allows you to do so
> right from the meterpreter prompt:
>
> add_group_user "Domain Admins" robin -h DC1

Did that in the end but for some reason I'm more use to doing it the other way.

Robin

> --
> Rob Fuller | Mubix
> Certified Checkbox Unchecker
> Room362.com | Hak5.org
>
>
>
> On Wed, Dec 22, 2010 at 6:25 AM, Robin Wood <robin () digininja org> wrote:
> > Something I've seen quite a few times but never got round to asking
> > about is that sometimes after doing an impersonate user when I try to
> > execute commands I get an error like this one:
> >
> > meterpreter > execute -t -f net group "domain admins" robin /add /domain
> > [-] stdapi_sys_process_execute: Operation failed: The system cannot
> > find the path specified.
> >
> > What does this mean? I tried giving it the full path to net just in
> > case it was that but that path it was complaining about but it isn't.
> >
> > Robin
> > _______________________________________________
> > https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework