dll-hijacking

A curated list of awesome privilege escalation

Simple hook tool to change Win32 program font.

Spartacus DLL/COM Hijacking Toolkit

Project for tracking publicly disclosed DLL Hijacking opportunities.

Robber is open source tool for finding executables prone to DLL hijacking

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

DLL Hijacking Detection Tool

Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".

For when DLLMain is the only way

Windows - Weaponizing privileged file writes with the Update Session Orchestrator service

Perfect DLL Proxying using forwards with absolute paths.

This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification.

[LEGACY] CROSS † CHANNEL 中文化 (汉化) 项目，源代码以及网站。（全翻译文本、全平台移植源码已公开！欢迎修改&学习！）CROSS † CHANNEL Chinese Localization Project, source codes and websites. (All translations and scripts are open, welcome on any improvements!)

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

Weaponizing for privileged file writes bugs with windows problem reporting

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

Windows 10 Privilege Escalation (magnifier.exe) via Dll Search Order Hijacking

Generate DLL Hijacking Payload in batches.

Weaponizing for privileged file writes bugs with PrintNotify Service

Windows 10 CDPSvc DLL Hijacking - From LOCAL SERVICE to SYSTEM