b4rtik/SharpMiniDump

Stars
253
Rank 160,014 (Top 4 %)
Language
C#
License
BSD 3-Clause "New...
Created about 5 years ago
Updated almost 2 years ago

b4rtik/SharpMiniDump

b4rtik

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Create a minidump of the LSASS process from memory

SharpMiniDump

Create a minidump of the LSASS process from memory (Windows 10 - Windows Server 2016). The entire process uses: dynamic API calls, direct syscall and Native API unhooking to evade the AV / EDR detection.

SharpMiniDump is a rough port of this project Dumpert by @Cn33liz and you will find the detail in this post, so BIG credits to him.

Other credits go to @cobbr_io and @TheRealWover for their work on SharpSploit (Execution / DynamicInvoke)

SharpKatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

metasploit-execute-assembly

Custom Metasploit post module to executing a .NET Assembly from Meterpreter session

RedPeanut

RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.

ATPMiniDump

Evading WinDefender ATP credential-theft

SharpAdidnsdump

c# implementation of Active Directory Integrated DNS dumping (authenticated user)

HiddenPowerShellDll

SharpLoadImage

Hide .Net assembly into png images

DonutSupport

RedPeanut Support Classes

PowerTheShell