Tagged: LSASS

July 21, 2025

NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs

NativeDump allows to dump the lsass process using only NTAPIs generating a Minidump file with only the streams needed to be parsed by tools like Mimikatz or Pypykatz (SystemInfo, ModuleList and Memory64List Streams). NTOpenProcessToken...

Open Source Tool

May 25, 2025

ComDotNetExploit: PoC for Windows PPL Bypass via COM-to-.NET

PPL Exploit PoC (Proof of Concept) This repository contains a C++ Proof of Concept (PoC) demonstrating the exploitation of Windows Protected Process Light (PPL) using COM-to-.NET redirection and reflection techniques for code injection. The...

Tagged: LSASS

NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs

ComDotNetExploit: PoC for Windows PPL Bypass via COM-to-.NET

Search

Brilliantly

Content & Links