Skip to content

lsadump  #4

@GoogleCodeExporter

Description

@GoogleCodeExporter

1. ./lsadump.py <system hive> <security hive>

ERR: Couldn't find subkey PolSecretEncryptionKey of Policy
Traceback (most recent call last):
  File "./lsadump.py", line 46, in <module>
    secrets = get_file_secrets(sys.argv[1], sys.argv[2])
  File "/pentest/passwords/creddump/framework/win32/lsasecrets.py", line 135, in get_file_secrets
    return get_secrets(sysaddr, secaddr)
  File "/pentest/passwords/creddump/framework/win32/lsasecrets.py", line 126, in get_secrets
    secret = decrypt_secret(enc_secret[0xC:], lsakey)
  File "/pentest/passwords/creddump/framework/win32/lsasecrets.py", line 66, in decrypt_secret
    block_key = key[j:j+7]
TypeError: 'NoneType' object is unsubscriptable

Version: 0.3 Date: 8/1/2012     on backtrack5r3 liveUSB 
If I try on the netbook with XP SP3 it works!!!
But when I try on the notebook with Win7 Home Premium 64bit it doesn't work!!!!

Original issue reported on code.google.com by giow...@gmail.com on 31 Aug 2012 at 9:43

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions