This project is a demonstration of advanced DLL hijack techniques. It was released in conjunction with the "Adaptive DLL Hijacking" blog post. I recommend you start there to contextualize this code.
This project is comprised of the following elements:
- Harness.exe: The "victim" application which is vulnerable to hijacking (static/dynamic)
- Functions.dll: The "real" library which exposes valid functionality to the harness
- Theif.dll: The "evil" library which is attempting to gain execution
- NetClone.exe: A C# application which will clone exports from one DLL to another
- PyClone.py: A python 3 script which mimics NetClone functionality
The VS solution itself supports 4 build configurations which map to 4 different methods of proxying functionality. This should provide a nice scalable way of demonstrating more techniques in the future.
- Stc-Forward: Forwards export names during the build process using linker comments
- Dyn-NetClone: Clones the export table from functions.dll onto theif.dll post-build using NetClone
- Dyn-PyClone: Clones the export table from functions.dll onto theif.dll post-build using PyClone
- Dyn-Rebuild: Rebuilds the export table and patches linked import tables post-load to dynamically prepare for function proxying
The goal of each technique is to successfully capture code execution while proxying functionality to the legitimate DLL. Each technique is tested to ensure static and dynamic sink situations are handled. This is by far not every primitive or technique variation. The post above goes into more detail.
Prepare a hijack scenario with an obviously incorrect DLL
> copy C:\windows\system32\whoami.exe .\whoami.exe
1 file(s) copied.
> copy C:\windows\system32\kernel32.dll .\wkscli.dll
1 file(s) copied.
Executing in the current configuration should result in an error
> whoami.exe
"Entry Point Not Found"
Convert kernel32 to proxy functionality for wkscli
> NetClone.exe --target C:\windows\system32\kernel32.dll --reference C:\windows\system32\wkscli.dll --output wkscli.dll
[+] Done.
> whoami.exe
COMPUTER\User
More info
- Nsa Hack Tools Download
- Hack Tools For Mac
- Pentest Tools Online
- Wifi Hacker Tools For Windows
- Hack Tools Online
- Beginner Hacker Tools
- Pentest Tools For Android
- Pentest Tools Android
- Hacking Tools For Windows 7
- Hak5 Tools
- Hack Tools Online
- Install Pentest Tools Ubuntu
- Tools Used For Hacking
- Pentest Tools List
- How To Make Hacking Tools
- Hacker Tools 2019
- Hack Tools For Windows
- Hak5 Tools
- Hacker Hardware Tools
- Termux Hacking Tools 2019
- Pentest Tools List
- Pentest Tools Port Scanner
- Pentest Tools Subdomain
- Hacker Search Tools
- Hacker Tools Free
- Hack Tools Github
- Easy Hack Tools
- Pentest Tools Port Scanner
- Hacker Hardware Tools
- Hacking Tools For Mac
- Hack Tool Apk
- Hacking Tools For Windows Free Download
- Hacker Tools Github
- Hacker Tools For Pc
- Pentest Reporting Tools
- Pentest Tools Windows
- Hacking Tools For Pc
- Pentest Tools Online
- Hacking Tools Usb
- Usb Pentest Tools
- Best Hacking Tools 2019
- Beginner Hacker Tools
- Hacking Tools Mac
- Pentest Tools For Mac
- Hacking Tools For Windows 7
- Hacking Tools Usb
- Hacking Tools Windows 10
- Android Hack Tools Github
- Hacker Tools Windows
- Hacking Tools And Software
- Best Hacking Tools 2019
- Hacking Tools 2020
- Hacking Tools Pc
- Game Hacking
- Hacking Tools Kit
- Hack Tools
- Hacking Tools
- Pentest Tools Apk
- Hacker Tools For Mac
- Hacking Apps
- Pentest Tools Find Subdomains
- Termux Hacking Tools 2019
- Hack Tools
- Hacking Tools Usb
- Pentest Tools Android
- Hacking Tools Software
- Hack Tools For Pc
- Hacking Tools Download
- Pentest Tools Tcp Port Scanner
- Nsa Hacker Tools
- Pentest Tools Find Subdomains
- Hacker Tools Github
- Install Pentest Tools Ubuntu
- Hacking Tools For Games
- Hacking Tools Free Download
- Hack Rom Tools
- Pentest Tools Tcp Port Scanner
- Hack Tools
- How To Make Hacking Tools
- Pentest Tools Nmap
- Pentest Tools Nmap
- Hacker Tools Linux
- Pentest Tools Framework
- Nsa Hacker Tools
- World No 1 Hacker Software
- Hack Tools 2019
- Hack Tools For Games
- Pentest Automation Tools
- Hack Tool Apk No Root
- Hack Tools For Pc
- Hacker Tools For Pc
- Hacking Tools 2019
- Hacker Search Tools
- Pentest Tools Port Scanner
- Hacking Tools Windows 10
- Android Hack Tools Github
- Wifi Hacker Tools For Windows
- Hacking Tools For Windows 7
- Hacking Tools For Games
- Hacker Tools For Pc
- Hacker Tools Free Download
- Hacking Tools Online
- Pentest Tools Port Scanner
- Hack Tools For Windows
- Hacker Tools Software
- Pentest Tools Nmap
- Hacker Tools Windows
- Hack Website Online Tool
- World No 1 Hacker Software
- Hacker Hardware Tools
- Pentest Tools Linux
- Github Hacking Tools
- Pentest Tools Windows
- Pentest Tools Windows
- Pentest Tools Port Scanner
- Hack Tools Pc
- Hacking Tools 2020
- Pentest Tools For Android
- Hack Tools For Pc
- Easy Hack Tools
- Hacker
- Hack Tools For Ubuntu
- Pentest Tools Nmap
- Pentest Tools Open Source
- Pentest Tools For Mac
- Hack Tools For Ubuntu
- Pentest Recon Tools
- Github Hacking Tools
- Hacker Tools Mac
- Beginner Hacker Tools
- Hacker Tools Software
- How To Install Pentest Tools In Ubuntu
- Hacking Tools Windows
- Hacker Tools Mac
- Hacking Tools Windows 10
- Hack Tools For Ubuntu
- Pentest Tools Online
- Nsa Hack Tools
- Hacker Hardware Tools
- Hacker Tools
- Hacker Tools 2019
- Hacking Tools Windows 10
- Hacks And Tools
- Nsa Hack Tools Download
- Hacking Tools For Mac
- Underground Hacker Sites
- Hacking Tools Software
- Pentest Tools Website
- Easy Hack Tools
- Hack Tools 2019
Post a Comment