Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Problem: AtomicRed doesn't download externaltools #2917

Open
WrongProvider opened this issue Sep 4, 2024 · 1 comment
Open

Problem: AtomicRed doesn't download externaltools #2917

WrongProvider opened this issue Sep 4, 2024 · 1 comment

Comments

@WrongProvider
Copy link

What did you do?

ℹ Please replace this with what you did.
I ran Invoke-AtomicTest T1110.001 -TestNumbers 4

ℹ Please replace this with what you expected to happen.
It was suposed to run kerbrute like this:
Executing test: T1110.001-4 Password Brute User using Kerbrute Tool


/ /_____ / / _______ / /
/ //_/ _ / / __ / / / / / __/ _
/ ,< / __/ / / /
/ / / / /
/ / /
/ __/
/
/|
|_
// /.
// _,/_/___/
Version: v1.0.3 (9dad6e1) - 09/04/24 - Ronnie Flathers @ropnop
2024/09/04 06:36:21 > Using KDC(s):
2024/09/04 06:36:21 > LAB.LOCAL:88
2024/09/04 06:36:21 > open C:\Users\ADMINI~1\AppData\Local\Temp\2\bruteuser.txt: The system cannot find the file specified.
Exit code: 0

What happened instead?

ℹ Please replace this with of what happened instead.
This error happens, like with every tool that needs to run an external tool in C:\AtomicRedTeam\ExternalPayloads
Executing test: T1110.001-4 Password Brute User using Kerbrute Tool
.\kerbrute.exe : The term '.\kerbrute.exe' is not recognized as the name of a cmdlet, function, script file, or
operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try
again.
At line:2 char:1

  • .\kerbrute.exe bruteuser --dc $ENV:userdnsdomain -d $ENV:userdomain $ ...
  •   + CategoryInfo          : ObjectNotFound: (.\kerbrute.exe:String) [], CommandNotFoundException
      + FullyQualifiedErrorId : CommandNotFoundException
    

Exit code: 0
Done executing test: T1110.001-4 Password Brute User using Kerbrute Tool

Your Environment

Windows Server 2022 Datacenter Evaluation 21H2
VMware Workstation

ran with Administrator

  • If relevant, which atomic test is this specific to? 1110.001-4 but really all the tests that need to download something, this happens.
@WrongProvider WrongProvider changed the title Problem: AtomicRed doens't download externaltools to Problem: AtomicRed doesn't download externaltools Sep 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants
@WrongProvider and others