
silph
Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall
authenticationmemory-forensicspassword-cracking+3
16810 months ago

Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall

tool to extract passwords from TeamViewer memory using Frida

Original PoC for CVE-2023-30367

This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created,…

Offset Independent Credential Extraction Tool