PPLKiller - Tool to bypass LSA Protection (aka Protected Process Light)https://github.com/RedCursorSecurityConsulting/PPLKiller …
nice- that tool is needed. suggestion for next version: Strip ppl protection away and remove all mitigations- like onlyloadmssignedbinaries Then everybody can strip sgrmbroker.exe, inject dll and use its handle to the driver.
-
-
I’ll look into this. Thanks for the feedback. Also planning on making it a Cobalt Strike BOF.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.