多种dump lsass思路和工具汇总

红队技巧-绕过杀软dump-Lsass内存        Gamma实验室微信公众号
https://mp.weixin.qq.com/s/QFRCMX14WJwMfM4_AEzpMg

【技术分享】转储lsass的方法原理和实现学习   安全客微信公众号
https://mp.weixin.qq.com/s/Vfecs_dk5Jt86VeqFaoWIg

利用远程进程分叉转存Lsass凭据     小生观察室微信公众号
https://mp.weixin.qq.com/s/67SghGobegFUC2td3az5qQ

转储 LSASS 技能     七芒星实验室
https://mp.weixin.qq.com/s/sScu8ps14Xr64IM_GbZtPg

Seclogon 第 2 部分的隐藏面：滥用泄露的句柄转储 LSASS 内存    splinter_code 博客
https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html?m=1

mr.d0x  推特
https://twitter.com/mrd0x/status/1460597833917251595

inversecos ᐡ ꒳ ᐡ  推特
https://twitter.com/inversecos/status/1450331995112804358

绕过卡巴斯基dump进程lsass.exe内存    xiangshen1990 CSDN博客
https://blog.csdn.net/xiangshen1990/article/details/104872566

LSASS 加密转储   sp00ks博客笔记
https://sp00ks-git.github.io/posts/LSASS-Encrypted-Dump/

Dump64.exe     mrd0xmrd0x github上发布
https://github.com/LOLBAS-Project/LOLBAS/pull/182/commits/e14a01bbb5c0b06990cd8f6fc85ee5908ae3da32

PostDump    post-cyberlabs github上发布
https://github.com/post-cyberlabs/Offensive_tools/tree/main/PostDump

LsassSilentProcessExit    deepinstinct github上发布
https://github.com/deepinstinct/LsassSilentProcessExit

DumpNParse    icyguider github上发布
https://github.com/icyguider/DumpNParse

EDRSandBlast   wavestone-cdt  github上发布
https://github.com/wavestone-cdt/EDRSandblast

lsassy    Hackndo  github上发布
https://github.com/Hackndo/lsassy

nanodump  helpsystems  github上发布
https://github.com/helpsystems/nanodump

HandleKatz   codewhitesec   github上发布
https://github.com/codewhitesec/HandleKatz

PPLdump   itm4n github上发布
https://github.com/itm4n/PPLdump

sqldump和avdump.exe   f1tz github上发布
https://github.com/f1tz/Misc/tree/9c41db77e41d42146467516ca865313f810c44f3

Internal-Monologue   eladshamir  github上发布
https://github.com/eladshamir/Internal-Monologue


lsass文件可使用经典工具mimikatz来获取用户的密码和hash
mimiaktz工具链接：https://github.com/gentilkiwi/mimikatz

欢迎大家在下方继续补充更多的dump lsass思路和工具。