1 link tagged with all of: vulnerability + lsass + credential-dumping + kernel-drivers + exploitation
Links
GhostKatz extracts LSASS credentials from physical memory using vulnerable signed drivers. Developed by Julian Peña and Eric Esquivel, it allows users to exploit known driver vulnerabilities for credential dumping. The tool is modular, enabling research on additional drivers.
lsass ✓
credential-dumping ✓
kernel-drivers ✓
vulnerability ✓
exploitation ✓