KuNgia09 / DumpThatLSASS

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

DumpThatLSASS

It's Fully Undetectable and bypass almost all the vendors AV/EDRs, it doesn't bypass RunAsPPL

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation, duplicate lsass handle from existed processes.

The execution may take time, bcz of sandboxing check

NOTICE

it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to comment the code related to Anti-Debuging and Anti-Sandboxing at the beginning of the main and recompile.

MiniLSASS

DumpThatLsass

About

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.


Languages

Language:C++ 100.0%