Skip to main content

DLL Hijacking

Hijacking Windows DLL's

Look for installed Applications​

Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*" | select displayname

You can also check if any of these binaries are vulnerable or not, specially DLL hijacking Vulnearbility.

Placing/Creating a file in the folder​

echo "this is my file" > 'C:\Folder\Where\the\binary\is\saved\file.txt'

Validate

type 'C:\Folder\Where\the\binary\is\saved\file.txt'

Network Enumeartion​