nanodump

NanoDump Un outil flexible qui crée un minidump du processus LSASS. Table des matières 1. Utilisation 2. Fonctionnalités 3. Combinaisons de techniques 4. Exemples 5. Redirecteurs HTTPS 1. Utilisation root@kitploit: usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate...

MalSeclogon

MalSeclogon Небольшой инструмент для работы со службой Seclogon. Полные технические подробности: https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-3.html Использование root@kitploit: MalSeclogon v0.2...

DuplicateDump - Dumping LSASS With A Duplicated Handle From Custom LSA Plugin

DuplicateDump is a fork of MirrorDump with following modifications: DInovke implementation LSA plugin DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly which would not be unloaded by LSASS process. That's why MirrorDump failed to delete...

Immunity Canvas: MS16_032

Name| ms16032 ---|--- CVE| CVE-2016-0099 Exploit Pack| CANVAS Description| MS16-032 Seclogon Thread Handle Leak Notes| CVE Name: CVE-2016-0099 VENDOR: Microsoft Notes: Our exploit module is really two modules: 1 An exploit, based off of Google Project Zero's post by James Foreshaw. It is extremel...