SecurityResearchDeepInstinct 260150c17e Update README.md
2020-12-23 13:51:21 +02:00
2020-11-29 10:51:11 +02:00
2020-11-29 10:51:11 +02:00
2020-12-23 13:51:21 +02:00
2020-11-29 11:36:53 +02:00

LsassSilentProcessExit

New method of causing WerFault.exe to dump lsass.exe process memory to disk for credentials extraction via silent process exit mechanism without crasing lsass.exe.

Usage:
LsassSilentProcessExit.exe <PID of LSASS.exe> <DumpMode>

Where DumpMode can be:

  0 - Call RtlSilentProcessExit on LSASS process handle
  1 - Call CreateRemoteThread on RtlSilentProcessExit on LSASS
S
Description
Automated archival mirror of github.com/deepinstinct/LsassSilentProcessExit
Readme 40 KiB
Languages
C++ 100%