README.md
May 23, 2026 · View on GitHub
CreateProcessAsPPL
If you want to run a program with PPL protection enabled, then this tool will help you do that.
Command Line Syntax
CreateProcessAsPPL.exe Mode:0-4 path_to_exe arg0 arg1 ...
Mode:
- PROTECTION_LEVEL_WINTCB_LIGHT 0
- PROTECTION_LEVEL_WINDOWS 1
- PROTECTION_LEVEL_WINDOWS_LIGHT 2
- PROTECTION_LEVEL_ANTIMALWARE_LIGHT 3
- PROTECTION_LEVEL_LSA_LIGHT 4
Links
An article about exploiting the PPL program to destroy Windows Defender
WSASS - Tool to dump the LSASS process on modern Windows 11
An article about exploiting WerFaultSecure.exe to dump LSASS
🐦 Enjoying my work? Support the journey by following me on X
Tools For Security Researcher and Hacker
Essential tools that every security researcher and hacker should have in their toolkit:
Essential Tools For Security Researcher and Hacker
READING
Some books you should read to sharpen your cybersecurity skills, especially in offensive security:
Books on Programming and Cybersecurity recommended by Zero Salarium Researchers