Pinned Loading

1. TrickDump TrickDump Public

   Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

   C# 536 57

2. NativeDump NativeDump Public

   Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

   C# 698 97

3. SAMDump SAMDump Public

   Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation

   C# 336 47

4. w11_shadow_copies w11_shadow_copies Public

   Manage Shadows Copies via the VSS API using C#, C++, Crystal or Python. Working on Windows 11

   C# 81 9

5. AutoPtT AutoPtT Public

   Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack, implemented in C++ and Python.

   C++ 82 8

6. AddUser-SAMR AddUser-SAMR Public

   Create local administrators with the SAMR API (lowest-level technique). Implemented in C#, Python, Rust and Crystal

   C# 52 3