YOLOP0wn/POSTDump

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.

Proof-of-Concept tool for extracting credential material from protected sessions on modern Windows systems.

Protected Process Dumper Tool

Extract credentials from lsass remotely

A C++ based BYOVD (Bring Your Own Vulnerable Driver) security research and testing project. It supports kernel-level operations including privilege escalation, physical memory R/W, and removing process protection via vulnerable drivers

Windows tool for dumping malware PE files from memory back to disk for analysis.