PPLdump icon indicating copy to clipboard operation
PPLdump copied to clipboard

Error with excute

Open com0t opened this issue 2 years ago • 0 comments

I use VS 2022 to build project After excute, I get error

[*] Found a process with name 'lsass' and PID 1020
[-] Process with ID 1020 is not a PPL
[*] Requirements OK
[*] DLL to hijack: EventAggregation.dll
[*] Impersonating SYSTEM...
[*] Created Object Directory: '\GLOBAL??\KnownDlls'
[*] Created Symbolic link: '\GLOBAL??\KnownDlls\EventAggregation.dll'
[*] Created symbolic link: '\??\GLOBALROOT -> \GLOBAL??'
[*] DefineDosDevice OK
[*] Impersonating SYSTEM...
[+] The symbolic link was successfully created: '\KnownDlls\EventAggregation.dll' -> '\KernelObjects\EventAggregation.dll'
[*] Mapped payload DLL to: '\KernelObjects\EventAggregation.dll'
[*] Started protected process, waiting...
[-] The DLL was loaded but something went wrong. :/

com0t avatar Oct 12 '22 10:10 com0t