Skip to content

BYOD (Bring Your Own Driver) Approach to Dumping PPL Procs (Shellcode Injection lol)

Notifications You must be signed in to change notification settings

topotam/ppldump

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

14 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Build

You can build the shellcode / executable using mingw-w64. To do so, just run from a Unix / MacOS X Installation : x86_64-w64-mingw32-gcc *.c -o ppldump.exe. Currently only supports x64, as I have not been able to obtain a 32 bit version of the zam.sys driver.

Written by Austin Hudson of GuidePoint Security

Usage

About

BYOD (Bring Your Own Driver) Approach to Dumping PPL Procs (Shellcode Injection lol)

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published