Tools

doudouhala/cve-2017-8464-exp-generator

this tool can generate a exp for cve-2017-8486, it is developed by python

mojtabatajik/robber

Robber is open source tool for finding executables prone to DLL hijacking

password123456/certverify

A scanner that files with compromised or untrusted code signing certificates written in python.

vu-ls/crassus

Windows privilege escalation discovery tool that parses Process Monitor boot logs to identify DLL hijacking, weak ACLs, and other elevation paths,…

print3m/dllshimmer

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

powershellmafia/powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

kindtime/nosferatu

DLL that hooks NTLM and Kerberos authentication in lsass.exe to inject a backdoor hash, enabling persistent authenticated access on Windows systems.

knight0x07/impulsivedllhijack

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be…

azagarampur/byeintegrity-uac

Bypass UAC by hijacking a DLL located in the Native Image Cache

adem-hosni/mappedimagesdetector

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

jonyfilc/printspoofer-reflectivedll

The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040/CVE-2019-1019) has been implemented as a Reflective DLL for penetration…

ideaslocas/adll

Automated DLL hijacking vulnerability discovery tool that analyzes PE binaries at load-time and runtime via API hooking, enumerating missing DLLs and…

hzphreak/vminjector

DLL Injection tool to unlock guest VMs

sh0ckfr/dllirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

redteamsocietegenerale/dllirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.