/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 cihansol.com
Windows DLL Proxying/Hijacking - Dev Blog
| | itm4n.github.io
Windows DLL Hijacking (Hopefully) Clarified | itm4n's blog
1.8 parsecs away

Travel
| | Whenever a "new" DLL hijacking / planting trick is posted on Twitter, it generates a lot of comments. "It's not a vulnerability!" or "There is a lot of hijackable DLLs on Windows..." are the most common reactions. Though, people often don't really speak about the same thing, hence the overall confusion which leads us nowhere. I don't pretend to know the ultimate truth but I felt the need to write this post in order to hopefully clarify some points.
| | googleprojectzero.blogspot.com
Project Zero: Windows Exploitation Tricks: Exploiting Arbitrary File Writes for Local Elevation of Privilege
4.1 parsecs away

Travel
| | Posted by James Forshaw, Project Zero Previously I presented a technique to exploit arbitrary directory creation vulnerabilities on Wi...
| | itm4n.github.io
Windows Privilege Escalation - DLL Proxying | itm4n's blog
1.1 parsecs away

Travel
| | DLL Hijacking is the first Windows privilege escalation technique I worked on as a junior pentester, with the IKEEXT service on Windows 7 (or Windows Server 2008 R2). Here, I'd like to discuss one of its variants - DLL Proxying - and provide a step-by-step guide for easily crafting a custom DLL wrapper in the context of a privilege escalation.
| | thehackernews.com
LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets
22.9 parsecs away

Travel
| Synacktiv uncovered LinkPro, a Golang rootkit using eBPF hide/knock modules activated by TCP window 54321.