spraykatz

Spraykatz Spray love around the world Index...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

ProcDump-for-Linux

ProcDump ProcDump은 Windows용 Sysinternals 도구 모음에 포함된 클래식 ProcDump 도구를 Linux 및 Mac용으로 재해석한 것입니다. ProcDump는 성능 트리거를 기반으로 애플리케이션의 코어 덤프를 생성할 수 있는 편리한 방법을 Linux 및 Mac 개발자에게 제공합니다. Linux 및 Mac용 ProcDump는 Sysinternals의 일부입니다. 설치 및 사용법 요구 사항 최소 Linux OS: Red Hat Enterprise Linux / CentOS 7 Fedora 29 Ubun...

MultiDump

MultiDump MultiDump는 C로 작성된 포스트 익스플로잇 도구로, Defender 경고를 트리거하지 않고 LSASS 메모리를 신중하게 덤프하고 추출하며, Python으로 작성된 핸들러를 포함합니다. 블로그 게시물: https://xreous.io/posts/multidump MultiDump는 ProcDump.exe 또는 comsvc.dll을 통한 LSASS 덤프를 지원하며, 두 가지 모드를 제공합니다: 덤프 파일을 암호화하여 로컬에 저장하는 로컬 모드와, 복호화 및 분석을 위해 핸들러로 덤프를 전송하는 원격...

How to get dump file of random crash process with ProcDump tool

ProcDump can be activated as a postmortem debugger in Windows OS. The crash dump file can be automatically generated if a process crashed...

New SPECTRALVIPER Backdoor Targeting Vietnamese Public Companies

Vietnamese public companies have been targeted as part of an ongoing campaign that deploys a novel backdoor called SPECTRALVIPER. "SPECTRALVIPER is a heavily obfuscated, previously undisclosed, x64 backdoor that brings PE loading and injection, file upload and download, file and directory...

Indiscriminate Exploitation of Microsoft Exchange Servers (CVE-2021-24085)

The following blog post was co-authored by Andrew Christian and Brendan Watters. Beginning Feb. 27, 2021, Rapid7’s Managed Detection and Response MDR team has observed a notable increase in the automated exploitation of vulnerable Microsoft Exchange servers to upload a webshell granting attackers...

Lsassy - Extract Credentials From Lsass Remotely

Python library to remotely extract credentials. This blog post explains how it works. You can check the wiki This library uses impacket project to remotely read necessary bytes in lsass dump and pypykatz to extract credentials. Requirements Python = 3.6 pypykatz = 0.3.0 impacket Installation From...

ProcDump - A Linux Version Of The ProcDump Sysinternals Tool

ProcDump is a Linux reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux developers to create core dumps of their application based on performance triggers. Installation & Usage Requirements Minimum OS: Red Hat...

ProcDump Sysinternals Tool for Linux

ProcDump is a Linux reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux developers to create core dumps of their application based on performance triggers. Requirements Minimum OS: Red Hat Enterprise Linux / CentO...

How to Create Veeam ONE Service Dump for Analysis

Purpose This article documents how to create Veeam ONE service memory dump. Solution In order to create Veeam ONE Monitor server service full memory dump, perform the following steps: 1. Download the ProcDump tool from the Windows Sysinternals page:...

AntiRansom - Fighting against Ransomware using Honeypots

AntiRansom is a tool capable of detect and stop attacks of Ransomware using honeypots. First, Anti Ransom creates a random decoy folder with many useless random documents Excel, PDF and then it monitors the folder waiting for changes. When a change is detected, AntiRansom tries to identify wich...