Skip to content

topotam/ppldump

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

14 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Build

You can build the shellcode / executable using mingw-w64. To do so, just run from a Unix / MacOS X Installation : x86_64-w64-mingw32-gcc *.c -o ppldump.exe. Currently only supports x64, as I have not been able to obtain a 32 bit version of the zam.sys driver.

Written by Austin Hudson of GuidePoint Security

Usage

About

BYOD (Bring Your Own Driver) Approach to Dumping PPL Procs (Shellcode Injection lol)

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors