CredEnum Exception

[leechristensen]

Describe the bug When running the CredEnum command, it failed with the following exception:

ERROR:   [!] Terminating exception running command 'CredEnum': System.ComponentModel.Win32Exception (0x80004005): Element not found
   at Windows.CredEnumCommand.<Execute>d__9.MoveNext()
   at Runtime.ExecuteCommand(CommandBase command, String[] commandArgs)

It looks like it may be accessing an array incorrectly?

Another error:

ERROR:   [!] Terminating exception running command 'CredEnum': System.ComponentModel.Win32Exception (0x80004005): A specified logon session does not exist. It may already have been terminated
   at Seatbelt.Commands.Windows.CredEnumCommand.<Execute>d__9.MoveNext()
   at Seatbelt.Runtime.ExecuteCommand(CommandBase command, String[] commandArgs)

To Reproduce I don't have access to a system where I can reproduce the first error . Occurred when running the CredEnum command.

The 2nd exception be reproduced by running the CredEnum command under a command prompt started with runas /netonly /user:asdf\asdf cmd.exe

Expected behavior The module to run and dump creds, or not print anything (or a message saying there weren't any)

Observed behavior An exception was thrown

[leechristensen]

For the "Element not found" exception, I can reproduce it when I'm logged in as a user and then run "runas /user:blah cmd.exe" and then run Seatbelt in the new command prompt.

[UP942901]

Happening to me too.

[GetRektBoy724]

For the "Element not found" exception,it means that there is no creds stored on your device.

[iNoSec2]

Someone has an idea about the CredEnum error?? Face the same issue rn Thank you for your time