Skip to content

Latest commit

 

History

6 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 

Repository files navigation

LSASS dump + HTTPS exfiltration, all in-memory. 17405996115875858500834891757661 How It works

  • Takes a snapshot of lsass.exe and then create a MiniDump of it.
  • Obfuscates the "lsass.exe" string with XOR in source-code to avoid flagging.
  • In-memory compression of MiniDump then uploads it to remote webserver via HTTPS.

About

LSASS dump+exfiltration

Topics

Resources

Stars

0 stars

Watchers

1 watching

Forks

Releases

Packages

Contributors

Languages