#procdump - Twitter Hashtag

Shanholo @ShanHolo

over 1 year ago

🚨#Opendir #RedTeam🚨 hxxp://47.90.155.109:3000/ ⚠️#Mimikatz ⚠️@Sysinternals #ProcDump

0

2

0

458

sicehice @sicehice

over 2 years ago

#opendir hosting #jndi exploits and #psexec #plink #procdump #fscan 45.76.216.78:8000

0

3

0

2

2K

Huntress @HuntressLabs

over 2 years ago

Any method of dumping #memory is viable, which includes using the #Procdump utility or any of the numerous C2 process dumping options. Sliver, Cobalt Strike, and many other major C2s have some kind of process dumping capability.

1

4

0

208

Patrick Matula @p_matula

almost 3 years ago

#windbg debugging walkthrough. #procdump as postmortem debugger is always nice. Especially when the crashes are completely random.

Christophe Nasarre @chrisnas.bsky.social @chnasarre

almost 3 years ago

I'm sharing the different steps I used during a customer random crash investigation: from the basics to analysing memory dumps in WinDbg with @KooKiz :^) https://t.co/mafwWPzsTw

1

76

21

32

9K

0

5

1

965

sicehice @sicehice

about 3 years ago

#opendir hosting #GhostRAT #PacketSender #ProcDump and #webshell 193.142.58.208:8888 Google Service Installer.exe.exe (GhostRAT) connects to 193.142.58.208:443 x.aspx connects to 100.42.74.199:10217

sicehice's tweet photo. #opendir hosting #GhostRAT #PacketSender #ProcDump and #webshell

193.142.58.208:8888

Google Service Installer.exe.exe (GhostRAT) connects to 193.142.58.208:443

x.aspx connects to 100.42.74.199:10217 https://t.co/7LbdWMA7pW

2

13

5

3

2K

Shawn Brink @Shawn_Brink_MVP

about 3 years ago

New #ZoomIt v7.1, #ProcDump 2.0, #ProcessExplorer v17.05, #RDCMan v2.93 and #VMMap v3.33 released https://t.co/wEWViwsGfT

0

4

1

0

118

Guy Leech

@guyrleech

about 3 years ago

A way to get a process dump of a running process from a remote machine without using mstsc or console via @SysInternals #procdump in a #PowerShell remote session. You probably won't be able to copy it over the network in that remote session though so just use c$

guyrleech's tweet photo. A way to get a process dump of a running process from a remote machine without using mstsc or console via @SysInternals #procdump in a #PowerShell remote session. You probably won't be able to copy it over the network in that remote session though so just use c$ https://t.co/rpLj2VMee7

0

3

2

613

Shawn Brink @Shawn_Brink_MVP

almost 4 years ago

New #ProcDump v11.0, ProcDump 1.3 for #Linux, and #ProcessExplorer v17.01 at #Microsoft #Sysinternals https://t.co/ffgNB2Akud

0

4

1

0

Patrick Matula @p_matula

almost 4 years ago

Display debug messages from a specific application: procdump.exe -l -fx * {PID} #procdump #troubleshooting #debugging #sysinternalssuite

0

3

0

1

0

Patrick Matula @p_matula

over 4 years ago

I use by far not all possibilities that #procdump offers. My commands with which I usually get along: https://t.co/yrzr6hrdSl

0

2

1

0

Guy Leech

@guyrleech

almost 5 years ago

If anyone is short of dumps , I can probably spare a few although it doesn't help that @SysInternals #procdump when set as the post mortem debugger generally produces 2 dump files for every crash

guyrleech's tweet photo. If anyone is short of dumps , I can probably spare a few although it doesn't help that @SysInternals #procdump when set as the post mortem debugger generally produces 2 dump files for every crash https://t.co/b4lZSOMQ7o

2

3

0

Johann Rehberger

@wunderwuzzi23

about 5 years ago

The existence of #procdump on Linux is not as widely known it seems. Here is a post on how an adversary might use it to create core memory dumps on Linux when hunting for credentials https://t.co/BEDIEVcZW3 #redteam #pentesting #infosec #ttp #sysinternals

0

2

1

0

Het Mehta

@hetmehtaa

over 5 years ago

How To Dump Lsass Without Mimikatz #Mimikatz #RedTeam #Procdump #InfoSec #CyberSecurity https://t.co/WlSE6y6oep

0

2

0

Guy Leech

@guyrleech

over 5 years ago

Use @SysInternals #procdump when getting dumps of high CPU processes as it writes the offending thread id into dump comments so you (or developers) know the thread to investigate procdump.exe -ma -c 75 -u -s 5 -n 3 badlad.exe