Rép. : Re: [framework] Rép . : Re: [framework] Meterpreter hashdump error

[francis.provencher at msp.gouv.qc.ca (FRANCIS PROVENCHER)]

Hi M. Miller,
 
I dont know why but this morning the hashdump command work.
 
meterpreter > use priv
Loading extension priv...success.
meterpreter > hashdump

******:1048:dd98978798329604d958e000538d0bb073:57cf48c938e7ad97be8c4b8cb6d6b7c8:::
 
Cool!!!
 
and the getuid work too,
 
meterpreter > getuid
Server username: francis

 thanks for your support, good work!
 
Francis Provencher
Minist?re de la S?curit? publique du Qu?bec
Direction des technologies de l'information
Division de la s?curit? informatique
T?l: 1 418 646-3258
Courriel:   Francis.provencher at Msp.gouv.qc.ca 
 
CEH - Certified Ethical Hackers
SSCP - System Security Certified Practitionner
Sec+ - Security +

> > > mmiller at hick.org 2007-04-11 01:05:38 >>>

On Tue, Apr 10, 2007 at 01:45:59PM -0400, FRANCIS PROVENCHER wrote:
> Its a XP SP1 system.

Unfortunately, this is where things get interesting :)  The current
server side debugging support in Meterpreter leaves much to be desired.
Unless you're particularly interested in stepping through things in a
debugger, we'll have to take an alternative approach.  First thing's
first, can you paste the output of getuid from meterpreter?  I just want
to confirm that everything is fine in terms of user access.

> On Tue, Apr 10, 2007 at 01:23:18PM -0400, FRANCIS PROVENCHER wrote:
> > Hi all,
> >  
> > I play with the meterpreter options, I try to make a hashdump and i received this error.
> >  
> > meterpreter > hashdump
> > [-] priv_passwd_get_sam_hashes: Operation failed: 87
>
> Error 87 means that the server failed because of an invalid parameter.
> What target operating system are you running this against?  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20070411/3d6c0a91/attachment.htm>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: FRANCIS PROVENCHER4.vcf
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20070411/3d6c0a91/attachment.asc>