CredBandit icon indicating copy to clipboard operation
CredBandit copied to clipboard

NtOpenProcessToken failed

Open YOLOP0wn opened this issue 2 years ago • 0 comments

Hello, i ran beacon as system on my Windows10 VM, and trying to dump lsass, i got the following error:

[*] Running credBandit by (@anthemtotheego) [+] host called home, sent: 17812 bytes [+] received output: [+] Attempting To Enable Debug Privs

[-] Failed to open process token

[-] Failed to adjust process token [+] received output: [+] Attempting To Dump Proccess 720

[-] [-] NtOpenProcess failed with status 351000

Seems that i cannot even NtOpenProcessToken, i tried from different process, same thing.

Do you know what's the issue ?

Thanks

YOLOP0wn avatar Mar 01 '22 08:03 YOLOP0wn