Nanodump - A Crappy LSASS Dumper With No ASCII Art

A flexible tool that creates a minidump of the LSASS process.

1. Features

• It uses syscalls (with SysWhispers2) for most operations.
• Syscalls are called from an ntdll address to bypass some syscall detections.
• It sets the syscall callback hook to NULL.
• Windows APIs are called using dynamic invoke.
• You can choose to download the dump without touching disk or write it to a file.
• The minidump by default has an invalid signature to avoid detection.
• It reduces the size …

art ascii lsass mimikatz nanodump syscalls userland windows windows exploitation