
CompMgmtLauncher_DLL_UACBypass
CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive

CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive

Signtool for expired certificates

Lockbit3.0 Microsoft Defender MpClient.dll DLL Hijacking PoC

Lateral Movement Using DCOM and DLL Hijacking

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

For when DLLMain is the only way

Execute shellcode files with rundll32

A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege


DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…

Generate a proxy dll for arbitrary dll

find dll base addresses without PEB WALK

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

Generate Proxy DLLs in Rust

Remote DLL Injection with Timer-based Shellcode Execution