[prev in list] [next in list] [prev in thread] [next in thread] 

List:       metasploit-framework
Subject:    Re: [framework] meterpreter commands fail after impersonation
From:       Robin Wood <robin () digininja ! org>
Date:       2010-12-23 9:02:02
Message-ID: AANLkTi=88ebs7mdw4=LbX=20L2Lzh9pv1hAE0savGJq= () mail ! gmail ! com
[Download RAW message or body]

On 23 December 2010 06:36, Rob Fuller <mubix@room362.com> wrote:
> Try dropping to a shell under the impersonation and doing it. I
> believe the net commands (correct me if I'm wrong) are part of cmd.exe
> so try doing 'cmd /c' before the net command.
>

It wasn't allowing me to do any commands, even shell. I've had it
before but can't come up with any similarities on networks where it
happens. I'll try the cmd /c method next time I come across it and see
if that helps.

> Also, incognito has a add user function in it that allows you to do so
> right from the meterpreter prompt:
>
> add_group_user "Domain Admins" robin -h DC1
>

Did that in the end but for some reason I'm more use to doing it the other way.

Robin

> --
> Rob Fuller | Mubix
> Certified Checkbox Unchecker
> Room362.com | Hak5.org
>
>
>
> On Wed, Dec 22, 2010 at 6:25 AM, Robin Wood <robin@digininja.org> wrote:
>> Something I've seen quite a few times but never got round to asking
>> about is that sometimes after doing an impersonate user when I try to
>> execute commands I get an error like this one:
>>
>> meterpreter > execute -t -f net group "domain admins" robin /add /domain
>> [-] stdapi_sys_process_execute: Operation failed: The system cannot
>> find the path specified.
>>
>> What does this mean? I tried giving it the full path to net just in
>> case it was that but that path it was complaining about but it isn't.
>>
>> Robin
>> _______________________________________________
>> https://mail.metasploit.com/mailman/listinfo/framework
>>
>
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework
[prev in list] [next in list] [prev in thread] [next in thread]