gmh5225/PPLKiller
Tool to bypass LSA Protection (aka Protected Process Light)
Repository profile
This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.
Repository updates
Get generated TwoSevenOneT/CreateProcessAsPPL development summaries by email, or follow the weekly and monthly RSS feeds.
Sign in to subscribe by email. RSS feeds are public.
Sign in to subscribeTracked growth, recent movement, and commit velocity from stored repository snapshots.
Latest capture 2026-06-24 13:01
1 capture since 2026-06-24
Stars from baseline 0
All tracked data
Frameworks, package managers, ecosystems, and dependency manifests found during catalog scans.
Scanned 2026-06-24 13:01
CreateProcessAsPPL.sln
dotnet ecosystem,
0 dependencies
Searchable topics, generated tags, and stack labels that explain where this repository fits.
Agent instructions and tool configuration paths found in the repository tree.
Nearest indexed repositories by embedding similarity.
Tool to bypass LSA Protection (aka Protected Process Light)
This program is designed to demonstrate various process injection techniques
Proof of Concepts code for Bring Your Own Vulnerable Driver techniques
KslDump — Why bring your own knife when Defender already left one in the kitchen?
kernel-mode DLL Injector
PE packer/crypter for Windows. compresses and encrypts executables with a custom virtual machine into a self extracting stub.