nanodump

NanoDump LSASSプロセスのミニダンプを作成する柔軟なツール。 目次 1. 使い方 2. 機能 3. テクニックの組み合わせ 4. 例 5. HTTPSリダイレクタ 1. 使い方 root@kitploit: usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate --elevate-handle --duplicate-elevate --seclogon-leak-local --seclogon-leak-remote C:\Windows\notepad.exe...

Nanodump - A Crappy LSASS Dumper With No ASCII Art

A flexible tool that creates a minidump of the LSASS process. 1. Features It uses syscalls with SysWhispers2 for most operations. Syscalls are called from an ntdll address to bypass some syscall detections. It sets the syscall callback hook to NULL. Windows APIs are called using dynamic invoke...