SkelSec·Jun 1, 2022LSASS needs an IVHello all, long time no see! In this article I’ll be showing some weirdness I found while parsing LSASS minidumps (as one does) in the last…
SkelSec·Nov 15, 2020Duping AV with handlesIn this article I’m describing yet another way to bypass AV detection/blocking access to LSASS process for credential dumping.A response icon1A response icon1
SkelSec·Nov 6, 2020Play with katz, get scratchedIn this article I’ll show step-by-step how to recover credentials even when paloalto’s Cortex XDR is “actively protecting” LSASS. If you…
