
DLLHSC
Automated scanner for discovering DLL search order hijacking candidates in Windows executables, featuring import table parsing, runtime module…

Automated scanner for discovering DLL search order hijacking candidates in Windows executables, featuring import table parsing, runtime module…

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040/CVE-2019-1019) has been implemented as a Reflective DLL for penetration…

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

RemoteDLLInjector

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.

We found a way to DLL sideload with cleanmgr.exe

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

Microsoft Office / COM Object DLL Planting

Python exploit for CVE-2025-24076, a Windows Cross Device Service privilege escalation vulnerability. Replaces a DLL to achieve SYSTEM privileges via…

A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.

Demonstration exploit for CVE-2022-32223: DLL hijacking in Node.js on Windows via malicious providers.dll, targeting OpenSSL installations.

Proof-of-concept for Cisco AnyConnect HostScan local privilege escalation via DLL hijacking and IPC command injection, demonstrating DLL proxying to…

Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)

Proof-of-concept for CVE-2026-21508, demonstrating a DLL hijacking attack on Windows 11 that escalates privileges by loading a crafted DLL into…