newcomrade12211/cve-2025-56383DLL hijacking to rev shell
Vulnerability
Attack Type: DLL Hijacking (DLL Hijacking)
Target Application: Notepad++
Method: The NppExport.dll file is loaded by Notepad++ from the working directory
Implementation
The malicious DLL contains:
Exported functions of the original library to ensure compatibility
Reverse shell connecting to the attacking host
Execution in a separate thread to prevent blocking the loading