
Koppeling
Adaptive DLL hijacking / dynamic export forwarding

Adaptive DLL hijacking / dynamic export forwarding

A Bind Shell Using the Fax Service and a DLL Hijack

Polymorphic shellcode generator for in-memory execution of EXE, DLL, .NET, VBScript, and JScript with per-output and per-build randomization for…

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

Code execution/injection technique using DLL PEB module structure manipulation

Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C# port of…

Adaptive DLL hijacking / dynamic export forwarding - EAT preserve

WptsExtensions.dll for exploiting DLL hijacking of the task scheduler.

phpstudy dll backdoor for v2016 and v2018

C++ memshell DLL generator for CVE-2019-18935, enabling in-memory web shell deployment via Telerik UI deserialization with Assembly.Load and IJW…

A proof of concept of an SEH overflow with arbitrary dll injection

Rust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence

Inject DLLs into the explorer process using icons

LoadLibrary for offensive operations

Two versions of CVE-2017-8759 exploits

PE loader with various shellcode injection techniques

For when DLLMain is the only way

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.