rhinosecuritylabs / aggressor-scripts Goto Github PK

I'm hitting an error when trying to utilize this script through cobaltstrike...

"""
beacon> audit_uac
[*] Tasked Beacon to audit UAC settings
[+] host called home, sent: 235 bytes
[+] host called home, sent: 148996 bytes
[+] received output:
ERROR: whoami : ERROR: Unable to get group membership information.
ERROR:
ERROR: At line:1168 char:22
ERROR: + $IsAdmin = whoami <<<< /groups /fo csv | ConvertFrom-CSV | Where-Object { $_.SID -eq 'S-1-5-
ERROR: 32-544' }
ERROR: + CategoryInfo : NotSpecified: (ERROR: Unable t...ip information.:String) [], RemoteE
ERROR: xception
ERROR: + FullyQualifiedErrorId : NativeCommandError
ERROR:
[-] user is not a local Administrator.
"""

Meanwhile, if I run the same command in a powershell prompt on the same system, it works fine, and reports that the user is an admin...
"""
PS C:\Users\user> whoami /groups /fo csv | ConvertFrom-CSV | Where-Object { $_.SID -eq 'S-1-5-32-544' }

Group Name Type SID Attributes

---

BUILTIN\Administrators Alias S-1-5-32-544 Group used for deny only
"""

Not sure if I'm doing something wrong, or if there is a bug in the code, but I wanted to see if I could get some assistance.