-
Notifications
You must be signed in to change notification settings - Fork 743
Open
Description
Describe the bug
An exception is being thrown during the OfficeMRUs command:
ERROR: [!] Terminating exception running command 'OfficeMRUs': System.InvalidCastException: Unable to cast object of type 'System.Int32' to type 'System.String'.
at Seatbelt.Commands.Windows.OfficeMRUsCommand.<GetMRUsValues>d__12.MoveNext()
at Seatbelt.Commands.Windows.OfficeMRUsCommand.<GetMRUsFromVersionKey>d__11.MoveNext()
at Seatbelt.Commands.Windows.OfficeMRUsCommand.<EnumRecentOfficeFiles>d__10.MoveNext()
at System.Linq.Buffer`1..ctor(IEnumerable`1 source)
at System.Linq.OrderedEnumerable`1.<GetEnumerator>d__1.MoveNext()
at Seatbelt.Commands.Windows.OfficeMRUsCommand.<Execute>d__9.MoveNext()
at Seatbelt.Runtime.ExecuteCommand(CommandBase command, String[] commandArgs)
I don't have access to a host where it occurs.
Looks like it may manifest itself on 2012 R2 machines. Might also occur after performing lateral movement to a host using WMI or WinRM.
To Reproduce
Run Seatbelt's OfficeMRUs command.
Expected behavior
The command to run, displaying an MRUs, or a notification saying that there aren't any.
Observed behavior
An exception occurs.
Metadata
Metadata
Assignees
Labels
No labels