
RC4Decryption
Abuses the Microsoft-signed tlscsp.dll LOLBin to run RC4 encrypt/decrypt via LsCsp_EncryptHwid, patching the hardcoded key in memory for BYOK…

Abuses the Microsoft-signed tlscsp.dll LOLBin to run RC4 encrypt/decrypt via LsCsp_EncryptHwid, patching the hardcoded key in memory for BYOK…

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

Rust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence

Generate Proxy DLLs in Rust

CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive

Code Execution & Persistence in NETWORK SERVICE FAX Service

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

For when DLLMain is the only way

Generate a proxy dll for arbitrary dll

Local & remote Windows DLL Proxying

Panoramic Dental Imaging software Stealthy Privilege Escalation Vulnerability

Proof-of-concept exploit for CVE-2024-31771 demonstrating arbitrary file write in TotalAV via symbolic link attack, enabling DLL planting and SYSTEM…

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

C++ DLL that performs Import Address Table hooking by parsing PE headers and redirecting imported function addresses to a custom hook inside a target…

This is working POC of CVE-2022-36271