sekurlsa::tickets /export - crash on Windows Server 2012 R2 Evaluation about mimikatz HOT 4 CLOSED

Hmm, it seems that with:

• Hotfix(s): 3 Hotfix(s) Installed.
• ntdll: Timestamp: Sat Sep 21 10:04:21 2013 (523D5305)

You did not follow my previous comment ;)

and latest Windows updates
gentilkiwi/kekeo#1 (comment)

from mimikatz.

Héhé that's true :)
The bug still exists on the most up-to-date version (latest KB: KB3112336) of that OS.
Crash_mimikatz_sekurlsa_tickets_export_update.zip

Happy new year and happy debugging !
Cheers.

from mimikatz.

Got it :)
My bad: I tested a specific change to Windows 10 build 10586 in the generic NT 6 tickets structures.

• 1b13057#diff-3d2c2bbb12f82d83088cbdb758f3e152

In fact, it affects all NT 6.x versions, except latest Windows 10.
You can fix it by removing

    DWORD       unk10586_d;
    PVOID       unk10586_p;

from the current version. I'll commit soon.

from mimikatz.

Thanks !

from mimikatz.