-
Notifications
You must be signed in to change notification settings - Fork 21
Description
I get an error when I use the script to get sslkey.log
Virtual Machine, vmware workstation
OS: Microsoft Windows Server 2012 R2 Standard
OS version: 6.3.9600
C:\Program Files\Python311\Scripts>frida.exe lsass.exe -l C:\keylog.js
____
/ _ | Frida 16.6.3 - A world-class dynamic instrumentation toolkit
| (| |
> _ | Commands:
// |_| help -> Displays the help system
. . . . object? -> Display information about 'object'
. . . . exit/quit -> Exit
. . . .
. . . . More info at https://frida.re/docs/home/
. . . .
. . . . Connected to Local System (id=local)
Failed to spawn: unable to find process with name 'lsass.exe'
C:\Program Files\Python311\Scripts>tasklist | findstr lsass.exe
lsass.exe 484 Services 0 9,288 K
C:\Program Files\Python311\Scripts>frida.exe -p 484 -l C:\keylog.js
____
/ _ | Frida 16.6.3 - A world-class dynamic instrumentation toolkit
| (| |
> _ | Commands:
// |_| help -> Displays the help system
. . . . object? -> Display information about 'object'
. . . . exit/quit -> Exit
. . . .
. . . . More info at https://frida.re/docs/home/
. . . .
. . . . Connected to Local System (id=local)
Attaching...
SslExpandTrafficKeys export not found! Probably using an old OS such as Win 7. Otherwise report an issue.
SslExpandExporterMasterKey export not found! Probably using an old OS such as Win 7. Otherwise report an issue.
[Local::PID::484 ]->
When I use this script to retrieve sslkey.log on windows server 2022, it works fine.