Skip to content

OfficeMRUs Exception #72

@leechristensen

Description

@leechristensen

Describe the bug
An exception is being thrown during the OfficeMRUs command:

ERROR:   [!] Terminating exception running command 'OfficeMRUs': System.InvalidCastException: Unable to cast object of type 'System.Int32' to type 'System.String'.
   at Seatbelt.Commands.Windows.OfficeMRUsCommand.<GetMRUsValues>d__12.MoveNext()
   at Seatbelt.Commands.Windows.OfficeMRUsCommand.<GetMRUsFromVersionKey>d__11.MoveNext()
   at Seatbelt.Commands.Windows.OfficeMRUsCommand.<EnumRecentOfficeFiles>d__10.MoveNext()
   at System.Linq.Buffer`1..ctor(IEnumerable`1 source)
   at System.Linq.OrderedEnumerable`1.<GetEnumerator>d__1.MoveNext()
   at Seatbelt.Commands.Windows.OfficeMRUsCommand.<Execute>d__9.MoveNext()
   at Seatbelt.Runtime.ExecuteCommand(CommandBase command, String[] commandArgs)

I don't have access to a host where it occurs.
Looks like it may manifest itself on 2012 R2 machines. Might also occur after performing lateral movement to a host using WMI or WinRM.

To Reproduce
Run Seatbelt's OfficeMRUs command.

Expected behavior
The command to run, displaying an MRUs, or a notification saying that there aren't any.

Observed behavior
An exception occurs.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions