Name		Name	Last commit message	Last commit date
NtDump		NtDump
x64/Release		x64/Release
NtDump.sln		NtDump.sln
README.md		README.md

Repository files navigation

NtDump

Description

LSASS process dumper with (mostly) NT API indirect syscalls. Currently undetected under many AV/EDR solutions.

Usage

.\NtDump.exe (Get-Process lsass).Id path_to_dump

Credits

https://github.com/Dec0ne/HWSyscalls/

About

Indirect NT syscalls LSASS dumper.

hacking pentesting redteam windows

47 stars

3 watching

Report repository

Releases

Packages

Used by

Contributors

Languages