Lsassy

Latest version: v3.1.11

Safety actively analyzes 630217 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 4

3.1.4

* Add SilentProcessExit method
* Fix double output issue
* Fix hard coded `/tmp path` in EDRSandBlast dump method for Windows compatibility

3.1.3

Hot fix
When using `--no-masterkeys` flag, no credentials would be returned.

Change default
Default was to display masterkeys. Now, flag `--masterkeys` needs to be used.

3.1.2

Improvements

- Add usable TGT in credentials output
- TGT are automatically dumped and saved locally
- Add **SQLDumper** method (Thanks [Luis Rocha](https://twitter.com/countuponsec) for [SQLDumper technique](https://twitter.com/countuponsec/status/910969424215232518))
- Add **nanodump_ssp** dump method (https://github.com/Hackndo/lsassy/pull/70 thanks to snovvcrash)
- Add **rawrpc** dump method (https://github.com/Hackndo/lsassy/pull/74 thanks to 3gstudent)
- Dissociate output and file format (https://github.com/Hackndo/lsassy/pull/69 thanks to D-XIII)
- Add masterkeys in output (https://github.com/Hackndo/lsassy/pull/71 thanks to zblurx)
- It's now possible to chain multiple commands on remote host to dump lsass (see [comsvcs_stealth.py](https://github.com/Hackndo/lsassy/blob/master/lsassy/dumpmethod/comsvcs_stealth.py) for example)
- Add `--keep-dump` parameter to keep lsass dump (no delete)
- Add `--no-color` parameter to disable colored output (maybe useful for Windows)

Thank you snovvcrash, 3gstudent, D-XIII and zblurx for your contribution!

3.1.1

Small update

Improvement

* Add rdrleakdiag_time option for custom wait time for rdrleakdiag method

Fix

* Fix issue where n.exe is the same for all threads for EDRSandBlast method

3.1.0

Features

* Add `--copy` parameter to copy "cmd.exe" or "powershell.exe" to C:\Windows\Temp with a random name before using them for command execution
* Add [EDRSandBlast](https://github.com/wavestone-cdt/EDRSandblast) dump method from [th3m4ks](https://twitter.com/th3m4ks) and [Qazeer](https://twitter.com/_Qazeer) technique. It will upload their executable, and the vulnerable driver to remove EDR kernel callbacks, dump lsass, and restore EDR kernel callbacks.
* Add [nanodump](https://github.com/helpsystems/nanodump) method from [s4ntiago_p](https://twitter.com/s4ntiago_p)
* Add [Rdrleakdiag technique](https://twitter.com/0gtweet/status/1299071304805560321) technique from [0gtweet](https://twitter.com/0gtweet)

Improvements

* Refactor dependencies to make it easier to create new dump modules based on compiled tools
* Possibility to host tools on a SMB server and provide the share path to lsassy
* Automatic listing of dump methods and execution methods in help
* Update `comsvcs_stealth` technique using [cyb3rops](https://twitter.com/cyb3rops) [tweet info](https://twitter.com/cyb3rops/status/1469249058137067520)

3.0.3

Features
* Add MirrorDump (https://github.com/CCob/MirrorDump) thanks to snovvcrash PR (https://github.com/Hackndo/lsassy/pull/62)
* Ability to provide an SMB share for dumpertdll method

Fixes
* Random extension bug when extension is forced by dumping method based on davidmckennirey idea (https://github.com/Hackndo/lsassy/issues/61)
* Issue with ctrl+c not quitting

Page 2 of 4

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.