Tools

weedhashpeddler/rc4decryption

Abuses the Microsoft-signed tlscsp.dll LOLBin to run RC4 encrypt/decrypt via LsCsp_EncryptHwid, patching the hardcoded key in memory for BYOK…

ghostvectoracademy/dllhijackhunter

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

1neptune/chimera

Rust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence

johnswiftc/rustdllproxy

Generate Proxy DLLs in Rust

hackerhouse-opensource/compmgmtlauncher_dll_uacbypass

CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive

hackerhouse-opensource/nofaxgiven

Code Execution & Persistence in NETWORK SERVICE FAX Service

print3m/dllshimmer

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

yjesus/rclocals

Linux startup analyzer

elliotkillick/ldrlockliberator

For when DLLMain is the only way

namazso/dll-proxy-generator

Generate a proxy dll for arbitrary dll

synacktiv/dlhell

Local & remote Windows DLL Proxying

gray-0men/cve-2024-22774

Panoramic Dental Imaging software Stealthy Privilege Escalation Vulnerability

restdone/cve-2024-31771

Proof-of-concept exploit for CVE-2024-31771 demonstrating arbitrary file write in TotalAV via symbolic link attack, enabling DLL planting and SYSTEM…

med0x2e/sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

octoberfest7/dropspawn_bof

CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking

sailay1996/cdpsvclpe

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

gmh5225/iat-hook

C++ DLL that performs Import Address Table hooking by parsing PE headers and redirecting imported function addresses to a custom hook inside a target…

saumyajeetdas/poc-of-cve-2022-36271

This is working POC of CVE-2022-36271