红队技巧-绕过杀软dump-Lsass内存 Gamma实验室微信公众号
https://mp.weixin.qq.com/s/QFRCMX14WJwMfM4_AEzpMg

【技术分享】转储lsass的方法原理和实现学习 安全客微信公众号
https://mp.weixin.qq.com/s/Vfecs_dk5Jt86VeqFaoWIg

利用远程进程分叉转存Lsass凭据 小生观察室微信公众号
https://mp.weixin.qq.com/s/67SghGobegFUC2td3az5qQ

转储 LSASS 技能 七芒星实验室
https://mp.weixin.qq.com/s/sScu8ps14Xr64IM_GbZtPg

Seclogon 第 2 部分的隐藏面：滥用泄露的句柄转储 LSASS 内存 splinter_code 博客
https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html?m=1

mr.d0x 推特
https://twitter.com/mrd0x/status/1460597833917251595

inversecos ᐡ ꒳ ᐡ 推特
https://twitter.com/inversecos/status/1450331995112804358

绕过卡巴斯基dump进程lsass.exe内存 xiangshen1990 CSDN博客
https://blog.csdn.net/xiangshen1990/article/details/104872566

LSASS 加密转储 sp00ks博客笔记
https://sp00ks-git.github.io/posts/LSASS-Encrypted-Dump/

Dump64.exe mrd0xmrd0x github上发布
https://github.com/LOLBAS-Project/LOLBAS/pull/182/commits/e14a01bbb5c0b06990cd8f6fc85ee5908ae3da32

PostDump post-cyberlabs github上发布
https://github.com/post-cyberlabs/Offensive_tools/tree/main/PostDump

LsassSilentProcessExit deepinstinct github上发布
https://github.com/deepinstinct/LsassSilentProcessExit

DumpNParse icyguider github上发布
https://github.com/icyguider/DumpNParse

EDRSandBlast wavestone-cdt github上发布
https://github.com/wavestone-cdt/EDRSandblast

lsassy Hackndo github上发布
https://github.com/Hackndo/lsassy

nanodump helpsystems github上发布
https://github.com/helpsystems/nanodump

HandleKatz codewhitesec github上发布
https://github.com/codewhitesec/HandleKatz

PPLdump itm4n github上发布
https://github.com/itm4n/PPLdump

sqldump和avdump.exe f1tz github上发布
https://github.com/f1tz/Misc/tree/9c41db77e41d42146467516ca865313f810c44f3

Internal-Monologue eladshamir github上发布
https://github.com/eladshamir/Internal-Monologue

lsass文件可使用经典工具mimikatz来获取用户的密码和hash
mimiaktz工具链接：https://github.com/gentilkiwi/mimikatz

欢迎大家在下方继续补充更多的dump lsass思路和工具。