lsass
There are 1 repository under lsass topic.
- Language:C 1642
- spraykatzLanguage:Python 743
CCob / MirrorDump
Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory
Language:C# 258- Language:C++ 234
ricardojoserf / NativeDump
Dump lsass using only Native APIs by hand-crafting Minidump files (without MinidumpWriteDump!)
Language:C# 232Hagrid29 / DuplicateDump
Dumping LSASS with a duplicated handle from custom LSA plugin
Language:C# 191TheKingOfDuck / hashdump
Dumping Windows Local Credentials Tools/Tricks
Language:PowerShell 65- Language:C++ 60
cl4ym0re / sysMiniDumpWD
A lsass dump tool using MiniDumpWriteDump & syscall(NtOpenProcess) technique. only tested on windows 11 with defender enabled:-)
Language:C 13Retr0-code / hash-dumper
Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already saved SAM and SYSTEM hives.
Language:C 11lassehauballe / Shellcode-Minidumpwritedump
Shellcode for creating a minidump file of the lsass.exe process.
Language:Python 9jkerai1 / WindowsHardeningScripts
Windows Hardening Powershell Scripts
Language:PowerShell 7keowu / WinHandKill
A plugin for x64dbg that allows you to hook the Local Security Authority Subsystem Service process to extract all possible TLS(On handshake, Import, Export or Generate) keys from the operating system using the SeDebugPrivilege escalation to make malware analysis faster and easier.
Language:CMake 7saif-mahmud / Crypto-Lab
CSE 4118 Cryptography and Security Lab
Language:C++ 5- Language:Python 4
Dump lsass.exe generating a file with the hostname and date in txt format using C++.
Language:C++ 4FOGSEC / SafetyKatz
SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
Language:C# 3- LeakGuardLanguage:Go 3
- Language:Rust 3
mazyaar / lsass_memory
Adversaries commonly abuse the Local Security Authority Subsystem Service (LSASS) to dump credentials for privilege escalation, data theft, and lateral movement. The process is a fruitful target for adversaries because of the sheer amount of sensitive information it stores in memory.
