From cc284075c48c5a563b1c0b59338cee7be7117ea6 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Sat, 14 Aug 2021 21:49:58 +0700 Subject: [PATCH] Add: w1u0u1/minidump to Credential Access --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index 4114260..336408d 100644 --- a/Offensive.md +++ b/Offensive.md @@ -1410,6 +1410,10 @@ Some tools can be categorized in more than one category. But because the current PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. + + w1u0u1/minidump + Custom implementation of DbgHelp's MiniDumpWriteDump function. Uses static syscalls to replace low-level functions like NtReadVirtualMemory. + ## Lateral Movement