
IconJector
Inject DLLs into the explorer process using icons
adversarial-attackexploitationpayload-development+3

Inject DLLs into the explorer process using icons

Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C# port of…

Remote DLL hijack exploit for Real Player (CVE-2022-32291) using malicious DLLs from WebDAV/SMB shares to achieve code execution.