The swiss army knife of LSASS dumping

• UpdatedSep 17, 2024
• C

Credentials gathering tool automating remote procdump and parse of lsass process.

• UpdatedJun 20, 2020
• Python

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

• UpdatedDec 17, 2024
• C#

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

• UpdatedFeb 6, 2025
• C#

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

• UpdatedMar 18, 2021
• C#

Windows NTLM Authentication Backdoor

• UpdatedJan 15, 2025
• C++

Dumping LSASS with a duplicated handle from custom LSA plugin

• UpdatedFeb 23, 2022
• C#

Dumping Windows Local Credentials Tools/Tricks

• UpdatedFeb 23, 2020
• PowerShell

Enabled / Disable LSA Protection via BYOVD

• UpdatedDec 8, 2021
• C++

Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already saved SAM and SYSTEM hives.

• UpdatedDec 29, 2023
• C

Windows Hardening Powershell Scripts

• UpdatedFeb 27, 2025
• PowerShell

A lsass dump tool using MiniDumpWriteDump & syscall(NtOpenProcess) technique. only tested on windows 11 with defender enabled:-)

• UpdatedOct 11, 2023
• C

Shellcode for creating a minidump file of the lsass.exe process.

• UpdatedAug 26, 2022
• Python

A bootkit to bypass Windows login (WIP)

• UpdatedOct 25, 2023
• Rust

A plugin for x64dbg that allows you to hook the Local Security Authority Subsystem Service process to extract all possible TLS(On handshake, Import, Export or Generate) keys from the operating system using the SeDebugPrivilege escalation to make malware analysis faster and easier.

• UpdatedJul 6, 2024
• CMake

CSE 4118 Cryptography and Security Lab

• UpdatedSep 17, 2019
• C++

Dump Hashes From lsass

• UpdatedJun 9, 2022

Dump lsass with windows client and extract creds with pypykatz

• UpdatedJan 3, 2020
• Python

LSASSExtractor is a lightweight tool designed to capture memory dumps of the LSASS process on Windows systems. By leveraging the Windows API, it locates the target process and creates a memory dump, which can be analyzed to extract sensitive information such as passwords, encryption keys, and authentication tokens.

• UpdatedAug 28, 2024
• C++

Dump lsass.exe generating a file with the hostname and date in txt format using C++.

• UpdatedAug 29, 2021
• C++