CreateProcessAsPPL

If you want to run a program with PPL protection enabled, then this tool will help you do that.

Command Line Syntax

CreateProcessAsPPL.exe Mode:0-4 path_to_exe arg0 arg1 ...

Mode:

• PROTECTION_LEVEL_WINTCB_LIGHT 0
• PROTECTION_LEVEL_WINDOWS 1
• PROTECTION_LEVEL_WINDOWS_LIGHT 2
• PROTECTION_LEVEL_ANTIMALWARE_LIGHT 3
• PROTECTION_LEVEL_LSA_LIGHT 4

Links

An article about exploiting the PPL program to destroy Windows Defender

WSASS - Tool to dump the LSASS process on modern Windows 11

An article about exploiting WerFaultSecure.exe to dump LSASS

☕ Like what I do? You can fuel my creativity with a coffee!

Tools For Security Researcher and Hacker

Essential tools that every security researcher and hacker should have in their toolkit:

Essential Tools For Security Researcher and Hacker

READING

Some books you should read to sharpen your cybersecurity skills, especially in offensive security:

Books on Programming and Cybersecurity recommended by Zero Salarium Researchers

Author:

Two Seven One Three