Pinned Loading

1. TrickDump TrickDump Public

   Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

   C# 541 58

2. NativeDump NativeDump Public

   Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

   C# 702 97

3. AutoPtT AutoPtT Public

   Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. Implemented in C#, C++, Crystal, Python and Rust

   C# 129 14

4. SAMDump SAMDump Public

   Extract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. Implemented in C#, C++, Crystal and Python

   C# 345 45

5. AddUser-SAMR AddUser-SAMR Public

   Create local administrators with the SAMR API (lowest-level technique). Implemented in C#, Crystal, Python and Rust

   C# 59 3

6. covert-control covert-control Public

   Google Drive, OneDrive and Youtube as covert-channels - Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram

   Python 68 8