reddit hackernews mail facebook facebook linkedin
MultiDump

MultiDump

Post-exploitation tool for dumping and extracting LSASS memory discreetly.

MultiDump is a post-exploitation tool written in C for dumping and extracting LSASS memory discreetly, without triggering Defender alerts, with a handler written in Python.

MultiDump supports LSASS dump via ProcDump.exe or comsvc.dll, it offers two modes: a local mode that encrypts and stores the dump file locally, and a remote mode that sends the dump to a handler for decryption and analysis.