
HijackLibs
Project for tracking publicly disclosed DLL Hijacking opportunities.

Project for tracking publicly disclosed DLL Hijacking opportunities.

EternalBlue suite remade in C/C++ which includes: MS17-010 Exploit, EternalBlue vulnerability detector, DoublePulsar detector and DoublePulsar…

DFIR investigation resources for CVE-2021-36934, covering DLL hijacking, privilege-escalation detection, and forensic analysis of affected Windows…

Local privilege escalation PoC for Windows CVE-2026-66804 using CrossDevice DLL planting and SigmaPotato token impersonation to spawn a SYSTEM…

Exploiting the .lnk vulnerability and operating system handling mechanisms regarding explorer.exe and USB drives.

CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM

Rust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence

Proof-of-concept for CVE-2026-4255, a DLL side-loading privilege escalation in Thermalright TR-VISION HOME, demonstrating PATH-based planting of…

Robber is open source tool for finding executables prone to DLL hijacking

Research and proof-of-concept for CVE-2026-25676, a DLL search path hijacking vulnerability in M-Track Duo HD installer, including root cause…

Proof-of-concept for CVE-2026-21508, demonstrating a DLL hijacking attack on Windows 11 that escalates privileges by loading a crafted DLL into…

CVE-2021-34527 AddPrinterDriverEx() Privilege Escalation

Proof-of-concept for CVE-2025-47962 demonstrating local privilege escalation via DLL hijacking in Windows IpOverUsbSvc service due to insecure…

Modular exploit framework for CVE-2024-38077 (Windows RDL heap overflow) with ASLR bypass, heap grooming, ROP chain generation, and DLL injection…

SketchUp Desktop 2025 DLL Hijacking Vulnerability

Seagate Toolkit for Windows (Installer <2.35.0.6) is vulnerable to insecure DLL loading. The installer loads DLLs from the working directory without…

CVE-2025-56383-Proof-of-Concept

It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have…