MultiDump

MultiDump MultiDump ist ein Post-Exploitation-Tool, geschrieben in C, zum diskreten Auslesen und Extrahieren des LSASS-Speichers, ohne Defender-Warnungen auszulösen, mit einem in Python geschriebenen Handler. Blogbeitrag: https://xreous.io/posts/multidump MultiDump unterstützt LSASS-Dumps mittels...

PPLBlade

PPLBlade Ferramenta de despejo de processo protegido que suporta ofuscação de dump de memória e transferência para workstations remotas sem salvá-lo no disco. Funcionalidades principais : 1. Bypass da proteção PPL 2. Ofuscar arquivos de dump de memória para evadir mecanismos de detecção baseados ...

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

A new multi-stage phishing campaign has been observed targeting users in Russia with ransomware and a remote access trojan called Amnesia RAT. "The attack begins with social engineering lures delivered via business-themed documents crafted to appear routine and benign," Fortinet FortiGuard Labs...

PPLBlade - Protected Process Dumper Tool

Protected Process Dumper Tool that support obfuscating memory dump and transferring it on remote workstations without dropping it onto the disk. Key functionalities : 1. Bypassing PPL protection 2. Obfuscating memory dump files to evade Defender signature-based detection mechanisms 3. Uploading...