Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PWDump custom view issue when run under SYSTEM account #141

Open
DiPersiaTech opened this issue Feb 22, 2022 · 4 comments
Open

PWDump custom view issue when run under SYSTEM account #141

DiPersiaTech opened this issue Feb 22, 2022 · 4 comments

Comments

@DiPersiaTech
Copy link

When running

Get-ADDBAccount -All -DBPath "$Path\Active Directory\ntds.dit" -BootKey $key | Format-Custom -View PWDump

under the system account context (Which our automation system does), the output is broken into multiple lines. For example -

User:2677:NO
LM-HASH**********************:1111111111111111111111111:::

Where output should show as a single line -
User2677:NO LM-HASH**********************:1111111111111111111111111::::

Can replicate this by starting Powershell using PSEXEC as the system.

@MichaelGrafnetter
Copy link
Owner

Hello @DiPersiaTech , line wrapping depends solely on the configuration of your terminal window, which is profile-specific. You should be able to bypass it by piping the output to the Out-File cmdlet.

@DiPersiaTech
Copy link
Author

@MichaelGrafnetter thanks for the response. Same behavior actually, regardless of screen or file. I assumed the custom view had something to do with it and running under system. This is with the out-file

Get-ADDBAccount -All -DBPath "$Path\Active Directory\ntds.dit" -BootKey $key | Format-Custom -View PWDump | Out-File $Path\dump.txt -Force -Encoding ascii

@MichaelGrafnetter
Copy link
Owner

Interesting. Looking into the source file, there is only a space.

@DiPersiaTech
Copy link
Author

I concur. That is weird. If/when you get time, can you try to replicate with psexec just so I can see if it's me or. . .?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants