Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WinPEAS Stuck at 'Found Database Files' Stage #312

Open
fatmeat opened this issue Sep 12, 2022 · 8 comments
Open

WinPEAS Stuck at 'Found Database Files' Stage #312

fatmeat opened this issue Sep 12, 2022 · 8 comments

Comments

@fatmeat
Copy link

fatmeat commented Sep 12, 2022

Issue description

Dear Carlo, when I ran the windows binary at my victim, it always stucks on 'Found Database Files' stage.

Which parameters did you use for executing the script and how did you execute it?

Symptoms exist when I double click the exe, execute it via cmd or via powershell.

If winpeas, did you use a clean or obfuscated winpeas, and for which architecture?

winPEASx64, winPEASany

Is there any AV / Threat protection in the system?

No

Please, indicate the OS, the OS version, and the kernel version (build number in case of Windows)

ProductName: Windows 10 Enterprise LTSC 2019
EditionID: EnterpriseS
ReleaseId: 1809
BuildBranch: rs5_release
CurrentMajorVersionNumber: 10
CurrentVersion: 6.3
Architecture: AMD64

Please, indicate the check that is failing and add a screenshot showing the problem

image

@carlospolop
Copy link
Collaborator

Hi @fatmeat and @primetimenumberline,
Please, use the release of this Sunday and execute the new Winpeas with the arguments debug fileanalysis.
Send me a photo of the console once Winpeas hangs. There we should be able to see in which regex in which file is it DoS'ing Winpeas.

Moreover, as a potential bypass for this error I have introduced the new argument max-regex-file-size. You can indicate the maximum size of files to check with regexes (default 1MB). Using as arg max-regex-file-size=500000 you will set the maximum file size to 0.5MB and maybe it won't hang.

@fatmeat
Copy link
Author

fatmeat commented Oct 1, 2022

Thank you for the reply! I will have a shot and feedback! @carlospolop

@primetimenumberline
Copy link

image

Not sure that debug is really giving me anything useful back, so I'm not sure if I'm doing this properly; can you help give me a sanity check please? What am I missing? Thanks for helping to troubleshoot.

@chrisx41uk
Copy link

chrisx41uk commented Oct 19, 2022

Hey - great tool. I am having the same issue

Running on your latest release in Debug Mode with the max regex size down low

image

It then hangs here
image

@carlospolop
Copy link
Collaborator

Hi guys, this should be fixed in the latest release (it should be ready in 1h), could you check and let me know?

@chrisx41uk
Copy link

Thanks it does seem to be caught now - there is a timeout catch you have added. I tested it on the basic tryhackme Windows box. Many thanks for this!

image

image

@godylockz
Copy link
Contributor

I just ran this today (with latest release), its hanging on Found Database Files still.

@carlospolop
Copy link
Collaborator

Winpeas has had a big update. Is this still a problem? Could anyone check?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants