
DllShimmer
Weaponize DLL hijacking easily. Backdoor any function in any DLL.

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

PowerSploit - A PowerShell Post-Exploitation Framework

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be…

Panoramic Dental Imaging software Stealthy Privilege Escalation Vulnerability

Code Execution & Persistence in NETWORK SERVICE FAX Service

Proof-of-concept exploit for CVE-2024-31771 demonstrating arbitrary file write in TotalAV via symbolic link attack, enabling DLL planting and SYSTEM…

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

Generate Proxy DLLs in Rust

Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows

Abuses the Microsoft-signed tlscsp.dll LOLBin to run RC4 encrypt/decrypt via LsCsp_EncryptHwid, patching the hardcoded key in memory for BYOK…

Local & remote Windows DLL Proxying

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive

CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking

Reflective DLL that scans process memory and unhooks loaded libraries to evade security software, with UPX, TLS injector, and Meterpreter integration.

C++ DLL that performs Import Address Table hooking by parsing PE headers and redirecting imported function addresses to a custom hook inside a target…

Stealthy DLL proxying implant for Microsoft Teams that injects AES-encrypted shellcode via unhooking techniques, providing persistent backdoor access…