# WinHandKill

[DecompHub listing](<https://app.decomphub.com/projects/winhandkill>) · [JSON record](<https://app.decomphub.com/data/projects/winhandkill.json>)

## Description

> A plugin for x64dbg that allows you to hook the Local Security Authority Subsystem Service process to extract all possible TLS\(On handshake, Import, Export or Generate\) keys from the operating system using the SeDebugPrivilege escalation to make malware analysis faster and easier\.

- Category: applications
- Work types: reverse\-engineering
- Targets: Unknown
- Project status: unknown
- Listing updated: 2026\-10\-07T08:32:31\.655Z
- Listing first published: 2026\-10\-07T08:32:31\.655Z

## Repository

- Repository: [keowu/winhandkill](<https://github.com/keowu/winhandkill>)
- License: GPL\-3\.0
- Repository stars: 12
- Stars checked: 2026\-10\-07T07:22:07\.957Z
- Repository metadata checked: 2026\-10\-07T07:22:07\.957Z

## Progress

Each value describes only its stated scope. An observation date is when DecompHub read the source; it is not a publisher measurement date.

No sourced numeric progress is currently reported. This is unknown progress, not 0%.

## Project details

- Languages: CMake

## Contributing

- Contribution status: unknown
- Help requested: Not reported
- Contribution instructions: Not reported
- Contribution source: Not reported
- Contribution information checked: Not reported
- AI contribution policy: unspecified
- AI policy source: Not reported

## Listing sources

- [Public repository metadata](<https://github.com/keowu/winhandkill>)
- [Discovery query](<https://api.github.com/search/repositories?q=topic%3Areverse-engineering+is%3Apublic+fork%3Afalse+created%3A2022-04-02..2023-06-09&sort=updated&order=desc&per_page=100&page=4>)

## Data notes

Descriptions remain in their recorded source language. Missing values are not inferred. Repository licensing is upstream metadata; this export does not grant rights to upstream code or assets.

Schema version: 1. [Public data documentation](<https://decomphub.com/data>).