b4rtik/ATPMiniDump

Stars
251
Rank 161,077 (Top 4 %)
Language
C
License
BSD 3-Clause "New...
Created almost 5 years ago
Updated almost 5 years ago

b4rtik/ATPMiniDump

b4rtik

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Evading WinDefender ATP credential-theft

ATPMiniDump

Dumping LSASS memory with MiniDumpWriteDump on PssCaptureSnapShot to evade WinDefender ATP credential-theft. Take a look at this blog post for details. ATPMiniDump was created starting from Outflank-Dumpert then big credits to @Cneelis

SharpKatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

metasploit-execute-assembly

Custom Metasploit post module to executing a .NET Assembly from Meterpreter session

RedPeanut

RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.

SharpMiniDump

Create a minidump of the LSASS process from memory

SharpAdidnsdump

c# implementation of Active Directory Integrated DNS dumping (authenticated user)

HiddenPowerShellDll

SharpLoadImage

Hide .Net assembly into png images

DonutSupport

RedPeanut Support Classes

PowerTheShell